Frequently asked.

The questions that come up most often before people sign up. If something isn't covered, write to hey@maski.dev and we'll add it.

What is an alias, exactly?

An alias is an email address you create on one of Maski's branded domains — like priya.work@mask.tld. Mail sent to it lands at Maski first, gets routed through our forwarder, and arrives in your real inbox. The sender never sees your real address.

What can I do with an alias that I can't with a Gmail rule?

Pause it instantly without changing any sender's contact for you. Retire it permanently so it can never receive another message. Apply per-sender rules — forward, block, or hold — without logging into your mail client. Maski lives upstream of your inbox; rules apply before mail gets there.

Where is my real email address stored?

Encrypted at rest with AES-256-GCM. Lookups happen through a separate blind-index column derived from a server-only HMAC key, so an attacker with read access to the database can't enumerate destinations. Postgres connections use TLS; the production volume is on full-disk LUKS.

What can Maski's operators see?

Metadata required to deliver mail — sender, recipient alias, timing, size, bounce status. Subjects and message bodies are encrypted at rest; operators don't have standing access to plaintext. Audit logging is on the roadmap before we hit a thousand users.

How is deliverability handled?

We send forwards through SES with our own DKIM and SPF in place. Hard bounces stop forwarding to a destination after a configurable threshold, and you'll be notified through a separate channel so a single bad destination address doesn't quietly silence you. Soft bounces retry with exponential backoff.

What happens to mail addressed to a paused alias?

It's silently dropped — no bounce, no 5xx. The sender has no way to tell whether the alias still exists. Un-pause an alias and forwarding resumes on the next inbound message.

Can I get my data out?

Yes. The Account page exports everything we hold for you as JSON, including aliases, contacts, sender rules, sessions, billing history. The export is available on every plan, including free, even during a trial.

How do I delete my account?

From the Account page. Deletion cascades through every table — aliases, contacts, held mail, sessions, recovery codes — with no orphan rows. Aliases you've retired stay retired forever; nobody, including you, can re-claim them.

Do you sell or analyse my email contents?

No. Forwarding is the product. We never read message bodies for analytics, ads, training, or anything else. Maski is built to be the fewest people possible standing between you and your inbox.

Can I reply from an alias?

Not on day one. The infrastructure to support replies (contact records, reverse-alias tokens) is already in the database, so reply-from-alias is a feature flag flip rather than a re-architecture — but we want deliverability to be solid before we turn outbound on for everyone.

What's the difference between Free and Pro?

Three aliases versus 25, 100 versus 5,000 forwards a day, and per-sender rules on Pro. See the pricing page for the full matrix.

Is there a refund policy?

Yes — we follow Dodo Payments' standard refund policy as the merchant of record. Reach out within 14 days of a charge if something is wrong and we'll work it out.