Shroud.email
shroud.email
What it is
Shroud.email creates email aliases that forward incoming messages to your real inbox, keeping the real address private. It removes tracking pixels from forwarded mail and proxies email images through its servers. You can delete or disable aliases and block individual senders, and the service says it works with all email providers, including Gmail and Proton Mail. Paid users can attach custom domains, configure catch-all aliases, and recreate those addresses elsewhere if they leave. The API manages aliases and discovers custom domains with bearer-token authorization. The project is open source under AGPL v3 and includes a Docker Compose deployment for self-hosting. Self-hosting requires a public server with ports 25, 80, and 443 open, plus keys for S3-compatible storage. Detected spam remains viewable in the web portal for seven days. The hosted service is EU-hosted on renewable energy. The Free plan costs nothing and includes five aliases and tracker blocking; the paid plan has no listed price and renews annually.
Spec sheet
- What it does
- Shroud.email creates aliases that forward messages to a real inbox while hiding the user’s primary address.Read 15 Oct 2026 · shroud.email
- API
- The API can manage aliases and discover custom domains, and uses bearer-token authorization.Read 8 Oct 2026 · shroud.email
- Support
- Users can ask general questions in GitHub Discussions, report technical issues through GitHub, or contact the maker by email or the site chat.Read 8 Oct 2026 · shroud.email
- License
- The project is published as libre open source under the GNU AGPL v3.Read 15 Oct 2026 · github.com
- Headquarters
- The operator’s registered office is Third Floor, 3 Hill Street, New Town, Edinburgh, EH2 3JP.Read 15 Oct 2026 · shroud.email
- Maker
- Tao identifies himself as Shroud.email’s founder and developer.Read 15 Oct 2026 · shroud.email
- Account security
- Passkeys and authenticator-app two-factor authentication are supported, and passwords are salted and hashed.Read 15 Oct 2026 · shroud.email
- Alias controls
- You can delete or disable an alias, or block a specific sender.Read 8 Oct 2026 · shroud.email
- Alias permanence
- Aliases are intended to be permanent but can be disabled or deleted by the user.Read 15 Oct 2026 · shroud.email
- API authentication
- API requests use bearer tokens created through the token endpoint, with optional TOTP when two-factor authentication is enabled.Read 15 Oct 2026 · shroud.email
- API documentation
- The reference is generated from an OpenAPI specification and includes parameters, request bodies, responses and examples.Read 15 Oct 2026 · shroud.email
- API scope
- The public API manages aliases and lists custom domains available to an account.Read 15 Oct 2026 · shroud.email
- Attachments
- Forwarded attachments are supported up to 25 MB.Read 15 Oct 2026 · shroud.email
- Custom domains
- Paid accounts can use owned domains, configure catch-all aliases, and recreate those addresses elsewhere later.Read 15 Oct 2026 · shroud.email
- Custom-domain limit
- The founder told an AppSumo user there is no stated custom-domain count limit, subject to a fair-use policy for unusually large numbers.Read 15 Oct 2026 · appsumo.com
- Deliverability limit
- The maker warns that small self-hosted mail servers can encounter spam-folder placement and blocklist problems.Read 15 Oct 2026 · shroud.email
- DNS requirements
- Custom-domain setup requires verification TXT, MX, SPF, DKIM and DMARC records.Read 15 Oct 2026 · shroud.email
- Documentation support
- Technical issues are directed to GitHub issues, feature questions to GitHub Discussions, and direct help to [email protected].Read 15 Oct 2026 · shroud.email
- Email compatibility
- The service says it works with any email provider, including Gmail and Proton Mail.Read 15 Oct 2026 · shroud.email
- Extension compatibility
- The Raycast extension page lists macOS compatibility and requires the user to supply an API token.Read 15 Oct 2026 · raycast.com
- Extension limitation
- The Raycast extension only fetches domains with valid DNS records and restricts custom-domain alias creation to domains it can fetch.Read 15 Oct 2026 · raycast.com
- Extension news
- The Raycast listing records an initial release on June 6, 2023 and a delete-alias update on July 15, 2026.Read 15 Oct 2026 · raycast.com
- Free-trial wording
- The hosted login page advertises a 30-day free trial, while the current pricing page presents a free plan without a time limit.Read 15 Oct 2026 · app.shroud.email
- Hosting
- The maker says the hosted service is EU-hosted on renewable energy; its privacy notice identifies Hetzner in Germany as hosting provider.Read 8 Oct 2026 · shroud.email
- Independent extension
- The Raycast Store lists a community Shroud.email extension with 68 installs for viewing, creating and deleting aliases and viewing domains.Read 15 Oct 2026 · raycast.com
- Legal operator
- The hosted service is operated by Working Hypothesis Ltd, registered in Scotland.Read 15 Oct 2026 · shroud.email
- Limit: outgoing branding
- An AppSumo purchaser reports that reverse-alias replies reveal Shroud.email and include service text; the founder confirms outgoing mail included Shroud.email text and said configurability was being worked on.Read 15 Oct 2026 · appsumo.com
- Limit: spam retention
- An AppSumo purchaser complains that spam messages are saved instead of simply discarded; the founder confirms this behavior for mail-server reputation reasons.Read 15 Oct 2026 · appsumo.com
- Open source
- The maker describes the project as open source under the AGPL v3 and provides a Docker Compose deployment for self-hosting.Read 8 Oct 2026 · shroud.email
- Praise: feature differentiation
- An AppSumo answer highlights outbound sending, sender or alias blocking and tracker stripping as differences from ordinary forwarding.Read 15 Oct 2026 · appsumo.com
- Privacy and data
- The privacy notice says message content is kept until delivery succeeds or delivery attempts end, while detected spam is kept until deletion or for seven days.Read 8 Oct 2026 · shroud.email
- Privacy processors
- The privacy notice identifies Hetzner in Germany as the hosting provider and lists Loops and Sentry as US-based processors.Read 15 Oct 2026 · shroud.email
- Privacy retention
- Message content is retained only until delivery succeeds or attempts end, while spam is kept until deletion or for seven days.Read 15 Oct 2026 · shroud.email
- Rating on AppSumo
- AppSumo lists 8 reviews for Shroud.email, but the opened page does not display a numeric rating.Read 15 Oct 2026 · appsumo.com
- SDKs
- The documentation points users to OpenAPI-compatible client generators rather than publishing a first-party SDK.Read 15 Oct 2026 · shroud.email
- Security storage
- The security page states that service data is stored exclusively in the European Union and databases use AES-256 encryption at rest.Read 15 Oct 2026 · shroud.email
- Self-host requirements
- Self-hosting needs a public Internet server with ports 25, 80 and 443 open plus S3-compatible object-storage keys.Read 15 Oct 2026 · shroud.email
- Self-hosting
- A Docker Compose deployment is provided for running Shroud.email on a user-controlled server.Read 15 Oct 2026 · shroud.email
- Self-hosting limit
- The documentation warns that self-hosting support is still new and may require troubleshooting.Read 15 Oct 2026 · shroud.email
- Self-hosting limitation
- The maker says self-hosting setup support is new and warns that deliverability can be difficult on small mailservers.Read 8 Oct 2026 · shroud.email
- Self-hosting requirements
- Self-hosting requires a public Internet server with ports 25, 80, and 443 open and access keys for S3-compatible object storage.Read 8 Oct 2026 · shroud.email
- Spam controls
- Users can block individual senders or disable an alias without deleting other aliases.Read 15 Oct 2026 · shroud.email
- Spam handling
- Detected spam is stored for seven days and made viewable in the web portal; the service says it otherwise stores email only when logging is enabled for debugging.Read 8 Oct 2026 · shroud.email
- Support incident
- An AppSumo user reported an unresponsive support chat and broken domain setup; the founder attributed it to a notification bug and said it was fixed in May 2024.Read 15 Oct 2026 · appsumo.com
- Tracker blocking
- Incoming messages are processed to remove tracking pixels, including previously unknown trackers.Read 15 Oct 2026 · shroud.email
- Use limits
- The terms prohibit bulk email and bulk alias creation, including automated creation, and apply a fair-use policy even to plans described as unlimited.Read 8 Oct 2026 · shroud.email
Plans and prices
Strong points and limits
Strong points
- Five aliases on the 0.00 USD Free plan
- Removes tracking pixels from forwarded email
- Works with Gmail, Proton Mail, and other providers
- Open source AGPL v3 project
- API manages aliases and custom domains
Limits
- Self-hosting needs ports 25, 80, and 443 open
- Small mailservers may have deliverability difficulties
- Bulk email and bulk alias creation are prohibited
Who it suits
It suits people who want private forwarding addresses, tracker blocking, and controls over individual aliases. Self-hosting users need server access, open mail ports, and S3-compatible storage credentials.
Verdict
Shroud.email combines forwarding aliases with tracker removal, alias controls, and optional custom domains. Its free tier is clearly specified, while paid pricing and the practical demands of self-hosting require further checking.
Where Specifiction places it
- Email Alias Services#5 of 238.7