Is a fake email private? What it hides and what it does not

·

Short answer: a fake email keeps your real inbox, your name and your phone number away from the website you sign up to. It does not make you invisible online, and the inbox itself is not private — anyone who knows the address can open it.

It is tempting to call this kind of service “anonymous” and stop there. That word does more harm than good, because people then rely on it for things it does not do. Here is the line, drawn honestly.

What it does hide

What it does not hide

Still visibleTo whom
Your IP address — roughly, your internet connection and areaevery site you visit, including this one
Whatever you type into the other sitethat site — the address does not anonymise the form
The content of messages sent to youanyone who knows the address
Payment details, if you pay for somethingthe merchant and the payment provider
⚠️
There is no password on the mailbox. That is not an oversight — it is what makes the address instant. The consequence is exact: knowing the address is the same as having access to it. Choose an unguessable username, and treat the mailbox as readable rather than private.

Who can read what arrives

Anyone who types the same address. Nothing is tied to your browser, your device or a session — which is the same fact that lets you reopen your mailbox from another computer, seen from the other side.

Practically, nobody is looking for your address. But “nobody has a reason to” is a different kind of protection from “nobody can”, and the difference matters when you are deciding what to have sent there.

What we hold, and for how long

The precise answer belongs in one place rather than in a summary that drifts out of date. It is written out in the privacy policy: what is stored, for how long, and what leaves the server.

Two things worth stating here because they are structural rather than policy:

Things that make a real difference

  1. A different address per service. The single most effective habit here, and it costs one click.
  2. An unguessable username. Turns “anyone can read it” from a practical risk into a theoretical one.
  3. Your own domain if you want the address to last — one MX record at your registrar. It is also the only way to be the sole person who could know an address exists.
  4. Not using it for anything important. Repeated everywhere on this site because it is the mistake with the highest cost.

What this is not a substitute for

If your concern is that a site should not learn your location, your identity or your other accounts, an address does not address any of those. Those are questions about connections, browsers and payments — different tools entirely, and it would be dishonest to imply this one helps with them.

All articles