Privacy Policy

What SpamStopper does

SpamStopper is an email alias and forwarding service. You create a unique email alias on our domain, and we forward emails sent to that alias to a real email address you provide. Your real email address is never revealed to anyone who sends email to your alias.

What data we collect

When you use SpamStopper, we collect:

• Your destination email address so we can forward emails to you.
• Your alias address which is the forwarding address we generate or you choose.
• Email metadata for forwarded messages, including sender address, subject line hash, message size, and timestamp. We use this for abuse prevention and service operation.
• Your IP address when you create an alias. We use this for rate limiting and abuse prevention only.

What we do not collect

• We do not read or store the body content of forwarded emails.
• We do not track your browsing activity.
• We do not use third-party analytics or advertising trackers on our website.
• We do not sell, rent, or share your data with anyone for marketing purposes.

How we use your data

• To forward emails from your alias to your real inbox.
• To detect and prevent abuse of the service.
• To send you transactional emails related to your alias (such as service notifications).

Data storage and security

Your data is stored in a hosted PostgreSQL database provided by Supabase. We use encrypted connections (TLS) for all data in transit. Access to the database is restricted to our server-side application using role-based credentials. We do not store email message bodies.

Data retention

Alias records and associated metadata are retained for as long as the alias is active. If an alias expires or is disabled, we retain the record to prevent the alias from being reissued to another user. Mail event metadata (sender, timestamp, size) is retained for operational and abuse prevention purposes.

Third-party services

We use the following third-party services to operate SpamStopper:

• Supabase for database hosting and authentication infrastructure.
• Mailgun (Sinch) for receiving and sending email.
• Vercel for hosting the web application.

Each of these services has their own privacy policy. We only share the minimum data required for them to operate on our behalf.

Your rights

You can request deletion of your alias and associated data at any time by contacting us at support@spamstopper.io. We will process deletion requests within 30 days.

Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will update the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, contact us at support@spamstopper.io.