NexMask
Privacy Policy
Last updated: August 2026
NexMask is designed with privacy as a precondition, not a feature. This policy explains what we collect, what we refuse to collect, and how data is handled. The principle is simple: whatever can go uncollected, goes uncollected.
01What we do not collect
We do not log visitor IP addresses or device fingerprints, we run no third-party trackers, and sign-up requires no phone number or real-world identity details. Destroyed inboxes and their mail leave no copies behind.
02What we collect
The minimum the service needs to function: your account email (used for login and as the forwarding target), the list of aliases you created with their on/off state, and anonymous aggregate usage counts that contain no mail content and no per-user behavior.
03How mail content is handled
During alias forwarding, messages pass through the pipeline in memory only; no body copies are stored after delivery. Mail in a disposable inbox is kept until the inbox expires, then destroyed together with it. We do not read, analyze or hand your mail content to anyone.
04Data sharing
We do not sell, rent or share user data. Only a legally binding order from a competent authority can compel disclosure — and by the design above, what we actually hold is very little.
05Deletion
You can delete any alias, or your entire account, from the console at any time. After account deletion, your alias list and account email are purged from production systems and backups within a reasonable operational cycle.
06Changes to this policy
Material changes will be published on this page with an updated date. Continued use of the service constitutes acceptance of the revised policy.