← Back

How it works

You hand out a disposable address instead of your real one. Mail sent to it reaches your inbox, but the sender never learns who you are — and neither does most of this system.

Creating an alias

Your address goes straight into a Skyflow vault, which hands back a token — an opaque reference with no relationship to the original text. Only the token is kept outside the vault.

you typeashley@gmail.comSkyflow vaultstores the addressevery read is auditedreturnsPostgresacme-jg6e9me9d78c9f-a3a5-…you hand outacme-jg6e9m@…
The address enters the vault and never leaves it. Everything downstream holds a token.

When someone emails you

The relay looks up the token for that alias, asks the vault to resolve it, and forwards the message. Your address exists in memory for the length of one request and is never written down.

senderwrites to acme-jg6e9m@…Mail serversMX points at the relayRelaymatches alias → tokenSkyflow vaultresolves token → addressYour inboxmessage arrivesforwarded, From rewritten
The vault is consulted once per message. That call is the only moment your address exists outside it.

What each part can see

This is the part that matters. A token is a reference, not an encoding — there is no key and no algorithm that turns it back into an address. Without a vault credential it is a meaningless string.

Application databaseacme-jg6e9me9d78c9f-a3a5-…no addressesThe senderacme-jg6e9m@…never sees youSkyflow vaultashley@gmail.comaudited on every read
A breach of the application database yields no email addresses. Only the vault can resolve a token, and it logs every time it does.

Why the sender’s name looks different

Forwarded mail arrives from an address on this domain rather than the original sender:

From: "Dana Reed (via skyflowmail.com)" <r-7gf031gg@skyflowmail.com>

Two reasons. Re-sending under someone else’s address fails modern authentication checks, and the message would land in spam or vanish. And it means that when you hit reply, your response routes back through the relay instead of going out from your real address — which would undo the whole point.

What this does not do

← Create an alias