When a mail comes to one of your aliases, the server reads it, makes a new message and sends it to the email address of your account. It does not store the text, the subject or the files. It does not write them in a log. After the server sends the message, the server has nothing left of it.
The mail passes through Cloudflare's email service, which receives it and sends it on. Your mail app and your mail provider keep the copy you read, as for any other mail.
What the server stores
Your email, to know whose aliases they are and where to send mail.
Each alias: its address, your label, whether it is on, the time you made it, and two counters: the mails forwarded and the mails blocked. You can have 20 aliases.
For each alias and each address that wrote to it: that address, and a random reverse address. This is how a reply from you finds its way back to that person. The server keeps up to 500 of them for each alias, and drops the oldest.
The server never stores these items:
The text, the subject, the headers or the files of any mail.
A list of the mails you got.
What the other side sees
The person who gets a mail from an alias sees the alias address. They do not see your account email. Replies are made as a new message, with none of your own headers. A reply must come from the email address of your account, or it is refused.
When you get a forwarded mail, the sender's name is in the From line with the words "via Alias". The sender's address is not in the mail. It is behind the reply address.
How long it stays
Your data stays until you delete it. You can delete an alias at any time. That deletes its counters and reverse addresses. Then mail to it is refused.
Delete my account
Sign in and choose "Delete my account". The server then deletes all your aliases and their reverse addresses. It also deletes your sign-in account. This cannot be undone.
Your sign-in is shared with Kevin's other apps. So you are signed out of them too. A request goes to Kevin automatically. He deletes what those apps keep for your account soon after.
Signing in
To sign in you use Google (on Google's site) or a code sent to your email. The sign-in service keeps your email and sets a cookie on utilarium.app (and on kamadorueda.com when the sign-in goes through it) for 30 days. For details, read the sign-in section of Coro's privacy page.
Where it runs
Email aliases runs on Cloudflare. The records are in Cloudflare D1. Like any web host, Cloudflare sees your IP address and the page you ask for. To limit how many aliases one address can make, Cloudflare counts requests by address. We do not store or log the address.
Analytics and error reports
Cloudflare Web Analytics can add a small script to the pages, to measure visits and speed. We do not control that script. Our own code sets no cookie and keeps no profile of you.
If the page has an error, it sends a report with the error message, page type and browser. It has no alias, label or email. Cloudflare keeps technical request logs, with no IP address, for 7 days. For about 1 in 10 requests, Cloudflare also records the browser and operating system, the language, the network and an approximate location. These records hold no mail and no address.
