Privacy Policy – Mail Alias Manager (Free)
Last updated: 2026

This add-on is designed with a privacy-first approach. It processes only the minimum data required to function and does not perform tracking, analytics, or behavioral profiling.



DATA STORED LOCALLY

The add-on may store the following data locally in the user’s browser using browser.storage.local:

• API Key
  The API key is stored locally to authenticate requests to the Haltman.io Mail Forwarding API.
  If the optional Lock feature is enabled, the API key is stored only in encrypted form.
  Encryption uses PBKDF2 for key derivation and AES-GCM for encryption.
  The password used to unlock the API key is never stored, transmitted, or logged.
• UI Preferences
  Cached domain list.
  Selected default domain.
  Interface and display preferences.

No locally stored data is shared with third parties.



NETWORK REQUESTS

The add-on communicates exclusively with the following endpoint:
https://mail.haltman.io

This communication is limited to email alias management operations:

• GET /domains
• GET /api/alias/list
• POST /api/alias/create
• POST /api/alias/delete

WHAT IS NOT TRANSMITTED

The add-on does not transmit:
- Current page URL
- Browsing history
- Page content
- Existing values of email input fields
- Any data unrelated to alias operations



USER DATA & TRACKING

• No analytics, telemetry, or tracking mechanisms are used.
• No usage statistics or behavioral data are collected.
• Clipboard writes occur only after explicit user actions
  (button clicks or context menu actions) and always provide visible feedback or notifications.

ABUSE PREVENTION

Haltman.io does not tolerate abuse of its services.

Any attempts to misuse, automate abusive behavior, or exploit the Mail Forwarding infrastructure may result in:
- Immediate neutralization of abusive actions
- Suspension or revocation of API access
- Additional technical or administrative countermeasures as required

The service is actively monitored to protect its infrastructure, users, and third parties.



TRANSPARENCY & SOURCE CODE

This project is open-source and fully auditable.
Source code and technical documentation are publicly available via the links provided in the add-on listing or support site.



CONTACT

For questions, concerns, or reports related to this add-on:

General: root@haltman.io
Privacy: privacy@haltman.io
Abuse reports: abuse@haltman.io



By using this add-on, you agree to this privacy policy.