AltcloakEffective September 16, 2026Privacy Policy
The short version: we store as little as we can, we never read or keep your mail, we never sell data, and you can delete everything yourself.
What we store, and why
- Your sign-in identity. Which provider you used (Discord or GitHub) with your user id and username there, or, for email accounts, your email and a salted hash of your password. We never keep the password itself.
- Your main email. The address you confirmed, and a replacement while it waits to be confirmed. The current one keeps working until the new one is confirmed. Needed to deliver mail to you and to reach you about your account.
- Your alt emails. Each address, the notes you type (account name, platform or site), its status, and per alt email counts of mail received. That is the product. Alts you add from other email addresses are kept the same way, notes only; removing one deletes it outright.
- Saved passwords, if you choose. Saved third-party passwords are encrypted at rest. Altcloak's service decrypts a saved password only when your authenticated account requests it. The key is kept outside the database. This is a convenience for your own alts, not a password manager.
- Activity log. One line per event: alt email created, mail forwarded or rejected, sign-in, a visit to the app (once a day), and so on, with a timestamp. Never the content of a message, never the subject line. Sign-in lines record a one-way hash of your IP address, not the address itself. When you reply from an alt email, the line records the address you replied to. When mail is forwarded, the line records whether a protected reply address could be attached.
- Reply addresses. For each sender who writes to one of your alt emails we keep a private reply address (the sender's address and a random token), so your reply can leave from the alt email.
- Market research, coarse on purpose. At sign-in we note your two-letter country code, your browser's language setting and your operating system family. This tells us which languages to support next. No IP address, no city, no precise location.
- Billing. If you subscribe, Stripe gives us a customer id and your plan status. Your card details stay with Stripe.
- Referrals. Your invite code and, if you joined through someone's link, whose. Used only to apply the discount.
- Reviews and suggestions. If you send us feedback in the app, we keep the text, your rating and your username. The person who operates Altcloak reads every one. A five-star review appears on the public reviews page, with your username, only if you ticked "show my review on the reviews page" when you sent it; email sign-ins are shown as "Verified user". Write to support@altcloak.com to have one taken down.
- Security records. Addresses that attack the site (hitting trap pages, forging requests, probing for holes) are recorded with the IP address and banned for a day, and abuse reports we receive are kept. These records are about attackers, not about your account. Like the activity log they are removed after 90 days, and a lifted ban's record within a week.
- Mail delivery reports. Mail providers send us automated reports about whether mail from altcloak.com was accepted. They contain counts and server addresses, not people.
Cookies
Altcloak sets only the cookies it needs to work: one that keeps you signed in (until you sign out, or when your browser closes if you untick "Remember me"), one that remembers that choice, a short-lived one during Discord or GitHub sign-in, and one that remembers an invite link for 30 days so the discount applies. There are no advertising cookies and nothing follows you to other sites.
Checks that happen at sign-up
- Bot check. Email sign-up and password reset use Cloudflare Turnstile, which looks at your browser to tell people from bots. It sees the same things any website you visit sees; we only learn pass or fail.
- Leaked-password check. When you set a password, we check it against the Have I Been Pwned list of passwords exposed in past breaches. Only the first five characters of a one-way hash of the password leave our server; the password itself never does, and the service cannot learn it.
- Throwaway-address check. Your main email is compared against public lists of disposable email domains. The lists come to us; your address is not sent anywhere.
Web analytics
We count page views with Cloudflare Web Analytics. It uses no cookies, does not fingerprint your browser, and gives us totals (how many people saw a page, from which country, on what kind of device), not a record of you. There are no advertising trackers on the site.
What we do not do
- We do not store, read, scan or analyse the content of mail passing through an alt email. Forwarding happens inside Cloudflare's email service and the message is not written to our database.
- We do not sell, rent or share your data with advertisers or data brokers, and we do not share it for advertising in any way.
- We do not use your data to train anything.
- We do not send marketing email. The only mail we send you is about your account: confirmation links, password resets, receipts from Stripe, and notices about the service or your alt emails.
Who else touches your data
Altcloak runs on a small number of service providers, each used for one job. They process limited data only as needed to provide their services:
- Cloudflare hosts the site and database, routes inbound mail, runs the bot check and counts page views.
- Resend sends outbound mail (confirmation links, replies from an alt email, service notices).
- Stripe handles payments.
- GitHub and Discord handle sign-in. We ask them only for your id and username.
- Have I Been Pwned answers the leaked-password check, as described above.
Administrative access. The person who operates Altcloak can access account records when needed for support, security, abuse handling, or operating the service. No other person has standing administrative access. The service providers listed above process limited data only as needed to provide their services.
Your data lives on Cloudflare's network, which stores it in data centres that may be outside your country, and Altcloak is operated from the United States.
Security
Sessions are stored hashed, saved passwords are encrypted, every response carries strict browser security headers, and we run automated checks for signs of intrusion. If we determine that a security incident involving your personal information requires notice, we will notify affected users and regulators without unreasonable delay and within the time required by applicable law.
Your choices and rights
- See everything: the app shows every alt email, note and saved password. The export gives you the list as a file.
- Change it: notes, saved passwords, your main email and your password can all be edited in the app.
- Sign out everywhere: one button in the Account section ends every session.
- Delete: deleting your account stops mail and access at once and gives you 30 days to recover by signing in again. After that your alt emails' notes and saved passwords, your main email, sign-in identity, sessions and referral link are removed for good. The retired addresses stay on file with no owner so they are never reissued. Activity log lines needed to prevent abuse are kept for up to 90 days and then removed.
- Ask: for a copy of your data, a correction, or anything else about it, write to support@altcloak.com. We answer within 30 days.
- If you are in the EU, UK or a place with similar law: the rights above are your rights of access, correction, portability, erasure and objection. You can also complain to your local data protection authority.
- If you are in California: we do not sell your personal information or share it for advertising, so there is nothing to opt out of. The rights above are your rights to know, delete and correct.
Children
Altcloak is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has an account, tell us at support@altcloak.com and we remove it.
Changes
When this policy changes, the date at the top changes. Changes that reduce your privacy are announced in the app before they take effect.