Frequently asked.

The questions that come up most often before people sign up. If something isn't covered, write to hey@maski.dev and we'll add it.

What is an alias, exactly?

An alias is an email address you create on one of Maski's branded domains, like jay.work@mask.tld. Mail sent to it lands at Maski first, gets routed through our forwarder, and arrives in your real inbox. The sender never sees your real address.

What can I do with an alias that I can't with a Gmail rule?

Pause it instantly without changing any sender's contact for you. Retire it permanently so it can never receive another message. Apply per-sender rules such as forward, block, or hold, without logging into your mail client. Maski lives upstream of your inbox; rules apply before mail gets there.

Where is my real email address stored?

Encrypted at rest with AES-256-GCM. Lookups happen through a separate blind-index column derived from a server-only HMAC key, so an attacker with read access to the database can't enumerate destinations. The encryption keys live in the running server's memory, never in the database, so a stolen database dump can't be decrypted on its own. Postgres connections use TLS.

What can Maski's operators see?

Metadata required to deliver mail: sender, recipient alias, timing, size, bounce status. Subjects and message bodies are encrypted at rest and are never shown in our admin tools. For support, an operator can reveal account details such as your login email on demand, and every reveal is recorded in our audit log, which is live today.

How is deliverability handled?

We send forwards through SES with our own DKIM and SPF in place. Hard bounces stop forwarding to a destination after a configurable threshold, and you'll be notified through a separate channel so a single bad destination address doesn't quietly silence you. Soft bounces retry with exponential backoff.

What happens to mail addressed to a paused alias?

It's silently dropped, with no bounce and no 5xx. The sender has no way to tell whether the alias still exists. Un-pause an alias and forwarding resumes on the next inbound message.

Can I get my data out?

Yes. The Account page exports everything we hold for you as JSON, including aliases, contacts, sender rules, sessions, billing history. The export is available on every plan, including free, even during a trial.

How do I delete my account?

From the Account page. Deletion cascades through every table (aliases, contacts, held mail, sessions, recovery codes) with no orphan rows. Aliases you've retired stay retired forever; nobody, including you, can re-claim them.

Do you sell or analyse my email contents?

No. Forwarding is the product. We never read message bodies for analytics, ads, training, or anything else. Maski is built to be the fewest people possible standing between you and your inbox.

Can I reply from an alias?

Yes, on Pro. Reply to a forwarded message and it goes out from the alias, so the other side only ever sees the alias, never your real address. You can also start a brand-new thread from an alias. Optionally set a display name per alias; leave it blank to stay anonymous.

What's the difference between Free and Pro?

Free gives you three aliases and 100 forwards a day with forward and block rules. Pro raises that to 25 aliases and 5,000 forwards a day and adds the outbound and power features: reply and send from your aliases, bring your own domain, and hold-in-inbox per-sender rules. See the pricing page for the full matrix.

Is there a refund policy?

Yes. We follow Dodo Payments' standard refund policy as the merchant of record. Reach out no later than 30 days after a charge if something is wrong and we'll work it out.