What a fake email address hides — and what it does not
It is easy to describe this kind of service as “anonymous” and leave it there. That word does more harm than good, because it invites people to rely on properties the tool does not have. Here is the boundary, drawn honestly.
What it does hide
- Your real mailbox from the service you signed up to — and from everyone that service later sells, shares or leaks its list to.
- The link between accounts. A fresh address per service means nobody can join up your sign-ups by matching addresses.
- Your name and phone number, because you never gave them. Nothing here asks for either.
What it does not hide
| Still visible | To whom |
|---|---|
| Your IP address | every site you visit, including this one |
| Whatever you type into the other site | that site — the address does not anonymise the form |
| The content of messages sent to you | anyone who knows the address |
| Payment details, if you pay for something | the merchant and the payment provider |
Who can read what arrives
Anyone who types the same address. Nothing is tied to your browser, your device or a session — which is the same fact that lets you reopen your mailbox from another computer, seen from the other side.
Practically, nobody is looking for your address. But “nobody has a reason to” is a different kind of protection from “nobody can”, and the difference matters when you are deciding what to have sent there.
What we hold, and for how long
The precise answer belongs in one place rather than in a summary that drifts out of date. It is written out in the privacy policy: what is stored, for how long, and what leaves the server.
Two things worth stating here because they are structural rather than policy:
- Messages are not kept indefinitely. The mailbox expires by design, and its contents go with it.
- Some tools on this site process nothing at all on our side. The punycode converter and Gmail Washer run in your browser. What you type into them is not sent to us, so there is nothing for us to store or to be asked for.
- The domain check is the exception, and deliberately so.The domain debugger asks DNS from our server, so the domain you type does reach us in that request. It buys a correct answer: only the server knows which mail hosts are ours. The domain is used for the lookup and not stored against you.
Things that make a real difference
- A different address per service. The single most effective habit here, and it costs one click.
- An unguessable username. Turns “anyone can read it” from a practical risk into a theoretical one.
- Your own domain if you want the address to last — one MX record. It is also the only way to be the sole person who could know an address exists.
- Not using it for anything important. Repeated everywhere on this site because it is the mistake with the highest cost.
What this is not a substitute for
If your concern is that a site should not learn your location, your identity or your other accounts, an address does not address any of those. Those are questions about connections, browsers and payments — different tools entirely, and it would be dishonest to imply this one helps with them.