Keep your real inbox private
Keep your real email address off sign-up forms so data brokers, trackers, and unwanted senders never get it. Glints and Cloaks both protect your inbox. The only difference is how long the address lasts.


Glints expire · Cloaks stay
Create a free temporary email with no account, or keep an alias until you decide to pause, rotate, or delete it. Glints are disposable addresses that expire after 60 minutes by default. Cloaks are lasting aliases for receipts and logins.
Built and hosted in the EU. Designed for sign-ups, one-time codes, and everyday mail, not for banking or official identity.
Made for real sign-ups
Use a temporary address for a form you may never open again. Use an alias for a store or service that will send receipts later. Tracking pixels stay blocked unless you allow them.
Keep your real email address off sign-up forms so data brokers, trackers, and unwanted senders never get it. Glints and Cloaks both protect your inbox. The only difference is how long the address lasts.
Give every newsletter, store, and app its own address. If one leaks or sends too much, pause or delete that address and the rest of your mail stays untouched. A Glint solves the problem even sooner: after 60 minutes, it stops receiving mail.
A Cloak never expires on its own. Pause it when it gets noisy, rotate the part before the @ if a sender is compromised, forward mail to a verified destination, or delete it when you’re done. You decide what stays active.
Start with a Glint: a temporary address that needs no account. If you want to keep it, turn the same address into a Cloak instead of creating a new one. Try first, and keep only what you need.
Whenever a form asks for too much
Use Cloakmail whenever a form asks for an email address you don’t want linked to your real one. Glints are temporary. Cloaks are lasting. Neither exposes the inbox you actually read.
No account
Needed for a Glint
60 min
Default Glint lifetime
Encrypted
Stored message content
EU
Built and hosted
Glint or Cloak, your choice
The basics
Cloakmail gives you two kinds of email addresses that protect your real inbox. A temporary email, also called a disposable address, is meant to be used once: for a sign-up, a one-time code, or a store you’ll never hear from again. An email alias lasts. It hides your real address while still receiving receipts, password resets, and support replies. In Cloakmail, these are called Glints and Cloaks. Naming the two makes the lifecycle clear from the start, instead of hiding it in a plus-tag on an address you’ve already shared.
A Glint is a temporary, disposable address. You can create one on this page without an account. It expires after 60 minutes by default unless you extend it, and then it stops receiving mail. Glints are ideal when you need an address for just a few minutes: confirming an account, claiming a discount, or testing a form.
When you create a Glint, Cloakmail shows you a recovery secret. You can download it while the mailbox is open, and anyone who has it can reopen the mailbox until it expires. Cloakmail stores only a verifier, never the secret itself. Your Glint session is also saved in your browser, so every tab shows the same inbox. This is for convenience, not anonymity, and rate limits and abuse protection still apply. If you want to keep the address, create an account and turn the Glint into a Cloak. When a Glint expires, its messages are already gone. The address is then held for 30 days by default before it is deleted, so it can’t be reused right away.
A Cloak is an email alias that lasts until you decide otherwise. It never expires on a timer. Give each store, newsletter, airline, or app its own Cloak, so if your address leaks you know where it came from. You can pause a Cloak, rotate the part before the @, forward its mail to a destination you’ve verified, or delete it.
Pausing stops new mail without deleting your history. Rotating gives the Cloak a new address, which is useful if a sender is compromised. Deleting is permanent. Cloaks are made for everyday mail like receipts, bookings, and community logins. You can read it in Cloakmail or forward it to a verified inbox. The free plan covers the basics, and Premium adds custom prefixes, more destinations, and higher limits.
Message content and attachments are envelope-encrypted before they are written to storage, so a copy of the storage disk is not a readable archive. This is not end-to-end encryption. Cloakmail decrypts your mail when you open it, and it still processes the metadata needed to deliver mail, filter spam, and show your inbox, such as headers, sender, t
iming, and spam verdict. Tracking pixels and remote images stay blocked unless you allow them. Application logs record the request method, route, status, timing, and a request ID, but never IP addresses, user agents, cookies, or message content. If you need a sealed mailbox that only you can open, Cloakmail is not the right fit.
Cloakmail is built and hosted in the European Union. The application, database, and storage run on the operator’s own infrastructure. The service is operated by Nordiqo Einzelunternehmen, Hohensteiner Straße 2, 27751 Delmenhorst, Germany. You can reach us at postmaster@nordiqo.de. Full details are in the Imprint.
The Privacy Policy explains what we process and why, how long we keep it, and which processors we use, such as Stripe for Premium billing. We don’t sell data or build advertising profiles. Hosting in the EU describes where our systems run. It is not a certification.
Cloakmail is for anyone who wants to keep their real email address off forms: newsletters, throwaway sign-ups, one-time codes, and store accounts you might abandon. A Glint is enough for a code that arrives in the next minute. A Cloak is right for a store that will send a delivery update next week.
Common uses include receiving one-time codes, confirming a newsletter, testing a checkout, separating a marketplace account, and keeping a forum away from the address your bank already has.
Don’t use a Glint or Cloak as your bank login, your official identity, or the only way to recover an account you can’t afford to lose. A Glint expires, and a deleted Cloak can’t be restored. Cloakmail isn’t a fully end-to-end encrypted mailbox, and it isn’t a plus-address on an inbox you’ve already shared.
It won’t hide you from a sender who already has your real address. It also isn’t suitable for legal identification, KYC verification, confidential legal correspondence, or long-term archiving. If you need a sealed mailbox with keys that never leave your device, choose an end-to-end encrypted provider instead.
Pricing
Glints and the base account are free. Premium is a monthly or yearly subscription billed through Stripe. Prices include VAT where applicable.
Free plan
Free
Premium
Shown at checkout
How it works
Create a temporary address in seconds, no account needed. If it earns a place in your life, turn it into a lasting Cloak.
1
Create a Glint right here, or create a Cloak from your account if you already know the address should last. A Glint expires after 60 minutes by default, and you can extend it.
2
Paste your temporary or lasting address into any sign-up, verification, or checkout field. Your real inbox never appears on the form, and tracking images in emails stay blocked unless you allow them.
3
Keep the address, turn a Glint into a Cloak, pause a noisy alias, rotate one that leaked, forward mail to a verified destination, or delete it. Deleted Cloaks can’t be restored.
Cloakmail is developed in Europe and runs on its operator’s own infrastructure in the European Union, including the application, database, and file storage. Message content is encrypted before it is stored. Message metadata is needed to deliver mail and show your inbox.

Get started
Create a Cloak for an address that lasts, or try a Glint on this page right now.
Same address. No expiry.