Cloakmail

Temporary email, without the exposure

Keep your real inbox off the form.

A Glint is a temporary, disposable email address: no account, and it expires after 60 minutes by default. Promote it to a Cloak when you need a lasting email alias you can pause, rotate, forward, or delete.

  • No account required for a Glint
  • Tracking content blocked unless you allow it
  • Stored message bodies are envelope-encrypted
  • Built and hosted in the EU

No account. It expires on its own.

Message

Built and hosted in the EU. For sign-ups, one-time codes, and the everyday in between, not for banking identity.

Built around real sign-ups

A disposable address when you need speed. A lasting alias when you need it to stay.

Use a temporary email for a form you may never revisit. Keep an email alias for the shop or service that will send receipts later. Tracking pixels stay blocked unless you allow them.

Stay unlisted

Keep your real mailbox off registration forms so data brokers, trackers, and opportunistic senders never receive the address you actually live in. A disposable Glint or a lasting Cloak both hide that inbox; the difference is only how long the public address survives.

Less unwanted spam

Give every newsletter, merchant, and SaaS its own unique address. If one of them leaks or starts flooding you, pause or delete that alias without burning the rest of your mail. Temporary inboxes stop the problem even sooner: after sixty minutes the disposable address simply stops receiving.

Pause, rotate, or delete

A Cloak does not expire on a timer. You pause a noisy alias, rotate the local-part when a vendor is compromised, forward into a destination you verified, or delete the address so nothing else arrives. You decide what stays live.

Glint or Cloak

Start with a Glint, a temporary, disposable email with no account. Promote that same address to a Cloak when you want a lasting email alias instead of minting a new one. Cloakmail follows how people actually sign up: try first, keep only what earned a place.

Wherever the form asks too much

One inbox. Many addresses.

Use Cloakmail when a form wants mail you do not want tied to your real name. Glints are temporary disposable addresses. Cloaks are lasting aliases. Neither requires you to publish the inbox you actually read.

  • No account

    Needed for a Glint

  • 60 min

    Default Glint lifetime

  • Encrypted

    Stored message bodies

  • EU

    Built and hosted

Glint or Cloak, your call

The short version

What is Cloakmail?

A temporary email, also called a disposable address or throwaway inbox, is a mailbox you use once, usually for a sign-up, a one-time verification code, or a shop that will never need to reach you again. An email alias is different: it still hides your real inbox, but it is meant to last, so receipts, password resets, and support threads can arrive without publishing the address you actually live in. Cloakmail is both. The product names are Glint and Cloak. People search for temporary email, disposable address, and email alias because they want that split: something that dies, and something that lasts under a name they control. Cloakmail names those two jobs so the lifecycle is visible on the form, not hidden behind a plus-tag on a mailbox you already published.

What a Glint is

A Glint is the temporary, disposable address. You can mint one on this page without creating an account. By default it expires after 60 minutes unless you extend it. After that lifetime the address stops receiving. A Glint is the honest tool when you only need mail for a few minutes, confirming an account, grabbing a discount, or testing a form.

Read moreShow less

It is not a secret identity and it is not a permanent mailbox. If you still need the same address later, create an account and promote that Glint to a Cloak instead of inventing a new one. Minting a Glint does not ask for a name or a login email. Cloakmail shows a recovery secret once and stores a verifier, not the secret in plaintext. Anyone who has that secret can reopen the mailbox until it expires. The Glint session also lives in your browser so every tab shows the same inbox. This is convenience, not anonymity; rate limits and abuse controls still apply. When the lifetime ends, message content is already gone. The address then sits in quarantine for a default of thirty days before physical deletion, so the same local-part is not immediately reused.

What a Cloak is

A Cloak is an email alias that stays until you say otherwise. It does not expire on a timer. Give each shop, newsletter, airline, or SaaS its own Cloak so a leak tells you who sold the list. You can pause a noisy alias, rotate to a fresh local-part, forward into a mailbox you control, or delete the address.

Read moreShow less

Cloaks are for the everyday in-between: receipts, booking confirmations, community logins, the stream that does not belong on your primary inbox. You read mail in Cloakmail or, if you prefer, forward it only to a destination you have verified. Pause stops new arrivals without destroying history. Rotate issues a fresh local-part when a vendor is leaked. Delete is final. The free tier is enough to learn this lifecycle; Premium later adds readable prefixes, extra destinations, and higher limits if you outgrow it.

What encryption covers, and what it does not

Privacy here is mechanical, not a slogan. Stored message bodies and attachments are envelope-encrypted before they are written to object storage, so a copied disk image of the blob store is not a readable archive.

Read moreShow less

That is not end-to-end encryption: Cloakmail still decrypts mail when you open it in the product, and we still process envelope fields required to deliver, filter spam, and show a list. Headers, sender, subject timing, and a spam verdict are not the encrypted payload. Tracking pixels and remote images stay blocked unless you allow them. If a threat model needs a sealed mailbox only you can open, this is the wrong product. Ciphertext lives in MinIO object storage. Envelope metadata and the message index live in PostgreSQL. Redis is used for operational caching and rate limiting. Application logs record method, route template, status, timing, and a request id. They do not record IP address, user agent, cookie values, or message content. HTML mail can contain tracking pixels; remote images stay blocked unless you explicitly allow them.

Where the data lives

Cloakmail is built and hosted in the European Union. The application, database, and object storage run on the operator’s own infrastructure. The public identity is Nordiqo Einzelunternehmen, Hohensteiner Straße 2, 27751 Delmenhorst, Deutschland. Electronic contact is postmaster@cloakmail.eu.

Read moreShow less

Those details sit on the Imprint, which also lists the EU online dispute resolution platform. The privacy notice is the document that lists purposes, retention, processors such as Stripe for Premium billing, and that no data-protection officer is appointed. We do not sell an advertising profile. Hosting in the EU is a fact of where the systems run, not a certification badge.

Read the Imprint

Who it is for

Use Cloakmail when a form asks for mail you do not want tied to your real name: newsletters, throwaway sign-ups, one-time verification codes, merchant accounts you may abandon. It is a receive path with a lifecycle you control. A disposable Glint is enough for a code that arrives in the next minute.

Read moreShow less

A lasting Cloak is enough for a shop that will send a parcel update next week. Typical jobs include catching a one-time passcode, confirming a newsletter you might mute, testing a checkout flow, isolating a marketplace account that may go quiet, and keeping a community forum off the address your bank already knows.

Who it is not for

Do not use a Glint or Cloak as your bank login, government identity, or the only recovery path for something you cannot afford to lose. A sixty-minute disposable address will vanish. A deleted Cloak will not come back.

Read moreShow less

Cloakmail is not a full encrypted mailbox like a Proton account, and it is not a Gmail-style plus-alias on an address you already publish. It will not hide you from a determined sender who already has your real inbox. Do not treat a Glint as a court-admissible identity, a KYC channel, or a drop for confidential legal correspondence. Cloakmail is not a lawyer, a bank, a government portal, or a certified long-term archive. If you need a sealed mailbox whose keys never leave your device, look at an end-to-end encrypted provider instead.

How it works

Glint first. Cloak when you are sure.

Mint a temporary email without an account. Keep a Cloak as a lasting alias only after the address has earned a place in your life.

1

Create an address

Start with a disposable Glint on this page, or create a Cloak from an account when you already know the alias should last. A Glint expires after 60 minutes by default unless you extend it.

2

Use it anywhere a form asks for mail

Paste the temporary email or lasting alias into the sign-up, verification, or checkout field. Your real inbox never appears on that form. Tracking images in the mail stay blocked unless you allow them.

3

Stay in control of the lifecycle

Keep the address, promote the Glint to a Cloak, pause a noisy alias, rotate a leaked one, forward to a verified destination, or delete it. A deleted Cloak does not come back.

Built and hosted in the EU

Cloakmail is developed in Europe and runs on the operator’s own infrastructure in the European Union: application, database, and object storage. Privacy is a product constraint, not a later add-on. Stored message bodies are envelope-encrypted before they are written to disk; envelope metadata still exists so the inbox can function.

The service is operated by Nordiqo Einzelunternehmen in Delmenhorst, Germany. Read the Imprint

  • Stored message bodies are envelope-encrypted
  • Tracking content blocked unless you allow it
  • Built and hosted in the EU

Ready when you are

Start with a Glint. Keep a Cloak.

Create a Cloak for a lasting address, or use a Glint on this page right now.

Same address. No longer on a timer.