One address per site, not the same one everywhere
Every service gets its own unique masked address that forwards straight to your real inbox. The moment one gets sold or leaked, revoke just that one — everything else keeps working.
Northgate Retail <deals@northgate-partners.com>
to shop9f2k1a@relay.yourdomain.com
A special offer just for you, from one of our marketing partners
Here's the deck for tomorrow's client call — let me know if the numbers on slide 4 need updating.
Revoking one alias never touches any other address, or your real inbox.
Unlimited
masked aliases, one per service
0-char
masked address, unique per site
0-day
period per renewal, no auto-charge
0-day
grace period if a renewal is missed
No new inbox to check, no app to install. MeilsVeil sits between the sites you sign up for and the inbox you already use.
Step 1
Type in the service you're signing up for and get a unique address instantly — nothing has to be "remembered," it's derived from your account each time.
Step 2
Mail sent to that alias forwards straight to your real inbox, with the envelope rewritten so forwarded mail doesn't get flagged as spam by your provider.
Step 3
One service sold your address? Kill just that alias from your dashboard. Every other alias, and your real inbox, keep working exactly as before.
Every account gets a live view of what's forwarding and what's been revoked — not a black box.
Get your first aliasUnlimited masked addresses, one per site, generated deterministically from your own account — there's nothing extra to store or manage on our end.
Kill a single alias the moment it's leaked, sold, or just spamming you. Every other alias, and your real inbox, keep working exactly as before — and you can always re-enable it later.
Mail is relayed through your alias domain with the envelope sender rewritten for SPF alignment, so forwarded mail doesn't get flagged as spam at the receiving end.
The same alias engine and relay run standalone on your own machine or server — no third party ever holds your account seed. The hosted plan is a convenience, not the only option.
Separate from your aliasing plan — free either way
This isn't a paid-plan feature — it's a separate, free Chrome/Edge extension that works whether or not you subscribe to hosted aliasing. It doesn't talk to your account at all; everything runs locally in your browser.
Remote images in Gmail/Outlook are blocked by default; known tracking parameters are stripped from links, and click-wrapper redirects are flagged.
EXIF/XMP from images, document properties from Office files, and Info/XMP from PDFs — detected from the actual file bytes, not the filename.
PGP-lite wraps a message in RSA-3072 + AES-256-GCM via your browser's own Web Crypto — real end-to-end encryption, smaller setup than full PGP. Not OpenPGP-compatible; both sides need the extension.
We're not the cheapest, and self-hosting isn't unique to us — SimpleLogin and addy.io offer that too. Here's the honest comparison.
| MeilsVeil | SimpleLogin | addy.io | Firefox Relay | |
|---|---|---|---|---|
| Alias masking & forwarding | ✓ | ✓ | ✓ | ✓ |
| Self-hostable | ✓ | ✓ | ✓ | — |
| Free browser extension for tracking-pixel & attachment cleanup | ✓ | — | — | — |
| Optional lightweight message encryption | ✓ | — | — | — |
| Starting price | $5/mo | ~$3/mo | ~$1/mo | ~$1/mo (free up to 50 masks) |
What's different here isn't price or self-hosting — it's that MeilsVeil also ships a free browser extension for tracking-pixel blocking, attachment cleanup, and optional encryption, on top of the aliasing. None of the three above offer anything like that, at any price. Competitor pricing and features change — worth checking their own sites before deciding.
Every plan includes unlimited aliases, automatic forwarding, and revocation — Plus and Pro add priority support on top. (The browser extension above is free on any plan — it isn't gated behind one.)
Starter
$5/month
Would rather not pay at all?
The same alias engine and relay run standalone on your own machine or server, for free — no third party ever holds your seed. Setup instructions are in the project README.
The hosted relay forwards mail to your real inbox the same way any forwarding service does, so it does pass through in transit — that's inherent to how forwarding works, and is documented plainly rather than hidden. If you'd rather no third party be in that path at all, self-hosting removes it entirely.
Mail to that address stops forwarding immediately. Every other alias and your real inbox are unaffected, and you can restore the revoked alias later from your dashboard if you change your mind.
Yes for messages sent through PGP-lite (the free browser extension, not a paid-plan feature) — RSA-3072 + AES-256-GCM, so anything the message passes through in transit only ever sees ciphertext. It isn't OpenPGP-format-compatible, so it doesn't interoperate with GnuPG or Thunderbird — the person you're writing to needs the same extension.
There's no auto-renewing charge to cancel — each month is a one-off payment, and you just don't pay for the next one. Mail keeps forwarding for a few days' grace period after that, so nothing cuts off the moment a renewal is missed.
No — the alias engine and relay are the same code either way, and every plan gets the same core aliasing functionality (Plus and Pro just add priority support). Any of them pays for us to run and maintain the hosted relay and dashboard for you; self-hosting is free but you run it yourself.
Set up in under five minutes. Cancel anytime by just not renewing.
Get your first alias