AliasFleet is an email alias service. Every website you sign up for gets its own forwarding address, your real inbox stays hidden, and when a site leaks your data you shut that one alias down. I spent the past year creating it. Last month, Brave shipped a similar feature inside its browser, which tells me the problem is real.
Your email address is a join key
Brave's VP of Privacy called the email address "a durable, universal identifier." He is right, and that's a very polite way to describe the problem.
Ad platforms use server-side matching. A business uploads a hashed list of customer emails, and the platform matches them to your ad profile. No cookies are needed. The browser is not involved. Your tracker blocker can't catch it. Your email follows you to every site that asks for it, and you can't opt out because you already agreed, one signup at a time.
Then there are data breaches. Last month, 4.6 million Chess.com addresses were leaked. Each email acts like a key, linking your chess account to your shopping and bank accounts, because it's the same everywhere. You can change a password in thirty seconds, but you can't easily change the email address your bank, employer, and family all use.
Why is reusing one email address dangerous?
It's risky because you use the same address everywhere. When 4.6 million Chess.com addresses leaked, attackers got more than just emails, they got the key that links your chess account to your bank account. Breaches are only part of the problem. Ad platforms buy hashed email lists and match them to your profile. No cookies are needed. Using one address means every leak and tracker points back to you.
What AliasFleet actually is
With AliasFleet, you get a separate email alias for every website you use. Any mail sent to an alias is forwarded to your real inbox, just like regular mail. The website never sees your real address. If someone steals that website's database, they only get an alias for that one site. That's where the damage stops. If a site is breached, you can open that alias and shut it down. The rest of your aliases keep working, and your real address was never exposed.
Brave now ships something similar inside its browser. Theirs is a feature; this is a service that goes anywhere
How it works
How does an alias forward mail to my inbox?
You create an alias, like store@yourhandle.aliasfleet.me, and give it to a website instead of your real address. Our servers receive the mail, process it in memory, and forward it to the inbox you choose. Your mail client shows which alias the message came through, so you always know who sent it.
You can make an alias, random or custom, like for newsletters. The browser extension lets you do this from any signup form with a right click. It works in Chrome, Firefox, and Edge.
Hand it to the site. Use it wherever you would type your email.
Read mail normally. It all lands in your existing inbox. Nothing new to check.
Reply normally. Two-way forwarding is built in, so replies go out from the alias, not your real address.
What happens when a website leaks my alias?
You open the alias and choose what to do: pause it, rotate it for a new address at that site, or deactivate it for good. The leaked address is now useless. Nothing else you own is affected.
A Tuesday morning example
You buy a lamp from an online furniture store and give them the alias oakstore. Six months later, the store is breached and the customer list ends up on a forum.
On Tuesday, the alias starts getting phishing emails. You deactivate it before your coffee cools. Now, the attackers have an address that leads nowhere.
Now imagine the same breach, but with your real address. You can't deactivate that. Changing it means updating your bank, your accounts, and everything else. So you keep the same address, and the phishing emails keep coming.
What AliasFleet is not
AliasFleet is not a disposable email service. Throwaway addresses are anonymous and expire in ten minutes. AliasFleet aliases are permanent. You keep them for as long as you use a service, organise them with categories and notes, and set rules for each alias. These are identities you control, not addresses you throw away.
What we do with your mail
We don't keep your mail. It arrives, is processed in memory, and then forwarded. The only mail that is saved is what you ask us to keep. If you turn on Quick Send body storage in Privacy Controls, your sent mail is stored encrypted with AES-256-GCM so you have a record. Another case is quarantine: when the spam filter or one of your Custom Rules catches something, we hold it for your review instead of delivering it.
Pricing
The free plan is the whole idea in miniature: 5 aliases, one inbox, and the extensions. Enough for the accounts that matter most. Pro and Business are for people who want their own domains, unlimited aliases, and heavier machinery: PGP, tracker blocking, and the API. Prices are on pricing. If the free tier hasn't earned its keep within a week, the one-click purge deletes everything and you are gone.
Your email address does not have to be public property. Give every site its own alias, and take it back.
Top comments (1)