Last updated: September 15, 2026


This policy covers the mailias browser extension and project website, and explains the default mailias Worker that you deploy in your own Cloudflare account. mailias is a self-hosted, open-source email alias tool. The project maintainer does not operate a central alias or email service for extension users.

• The extension stores your mail domain, Worker URL, key identifier, language, and setup status in browser local storage.
• Your secret key is imported as a non-extractable cryptographic key and stored in the extension’s IndexedDB database. The extension uses it locally to generate aliases and check the key identifier.
• When you open the popup, the extension reads the active tab’s URL to identify its site domain, suggest a label, and display saved aliases. It stores site domains, labels, record identifiers, creation times, and last-used times locally. It does not store the full tab URL or collect your browsing history in the background.
• Copy actions write the selected alias or secret key to your clipboard. Mapping import and export read or create a file that contains mail-domain and site-label records and timestamps; these exports do not contain your secret key.

This data supports alias generation, setup, and local alias management. The extension does not use browser sync to upload it.


With your permission, the extension sends HTTPS requests to the Worker URL you configure to check availability and configuration. A check includes your configured mail domain when available. The Worker returns configuration flags and a derived key identifier for comparison. The extension does not send your secret key, saved site-label mappings, or active tab URL in these requests. As with other network requests, the receiving infrastructure can receive your IP address and request metadata.

You separately enter your secret key and destination email address into your own Cloudflare configuration. Cloudflare Email Routing and your Worker process incoming email and recipient addresses to verify aliases and forward valid messages to that destination. The extension itself does not read your inbox or email contents. The default Worker has no persistent alias or message database.

It logs processing events and errors; Cloudflare infrastructure and logging settings may retain request or error information.


The extension contains no advertising, analytics, or tracking SDKs and sends no usage telemetry to the project maintainer. We do not sell user data, use it for advertising, or transfer it for creditworthiness or lending decisions. Use of data is limited to providing the user-facing alias and setup features described here, in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Cloudflare processes data for the Worker and email routing you configure. Your destination email provider processes forwarded mail. Those providers’ terms and privacy policies apply to their services. The maintainer has no access to your self-hosted configuration or mail through the extension.


Local settings and the cryptographic key remain until you reset mailias or remove its extension data. You can delete individual site-label records in settings. Resetting mailias deletes its local settings, records, and key. Removing a label does not invalidate that address at the Worker.

Resetting the extension does not delete your Cloudflare Worker, variables, secrets, provider logs, forwarded emails, exported files, clipboard contents, or password-manager backups. Manage or delete these separately through the relevant service or device. Provider retention depends on their policies and your configuration.


The project website has no analytics scripts, tracking pixels, or application cookies. Its hosting provider may process IP addresses and request metadata when serving pages. If you contact the maintainer or submit a GitHub issue, the information you choose to provide is used to respond and maintain the project. GitHub issues are public; do not include secret keys or private email contents.


This page will be updated when data handling changes, with the revision date shown above. For privacy questions, contact the maintainer through the mailias issue tracker.

Email: contact@pwll.dev