Maski vs Shroud.email
Maski
maski.dev
Shroud.email
shroud.emailSide by side
| Figure | Maski | Shroud.email |
|---|---|---|
| Price from | $4.99/mo | $2.92/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | Yes |
| Web | Yes | Yes |
| macOS | — | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 2 | 4 |
| Spec score · Email Alias Services | 7.8 (#15) | 8.7 (#5) |
| Alias controls | Users can pause or permanently retire aliases, and can set forward and block rules by sender. | You can delete or disable an alias, or block a specific sender. |
| Custom domains | Pro includes aliases on a user's own domain, with one-click DNS setup for supported providers. | Paid accounts can use owned domains, configure catch-all aliases, and recreate those addresses elsewhere later. |
| Hosting | The application and database run on AWS EC2 in ap-south-1 (Mumbai), with outbound email via Amazon SES in that region. | The maker says the hosted service is EU-hosted on renewable energy; its privacy notice identifies Hetzner in Germany as hosting provider. |
| Support | The site lists [email protected] for contact and security disclosures, and says vulnerability reports receive an acknowledgement and triage owner within five business days. | Users can ask general questions in GitHub Discussions, report technical issues through GitHub, or contact the maker by email or the site chat. |
Plans
In their own words
Shroud.email
Shroud.email creates email aliases that forward incoming messages to your real inbox, keeping the real address private. It removes tracking pixels from forwarded mail and proxies email images through its servers. You can delete or disable aliases and block individual senders, and the service says it works with all email providers, including Gmail and Proton Mail. Paid users can attach custom domains, configure catch-all aliases, and recreate those addresses elsewhere if they leave. The API manages aliases and discovers custom domains with bearer-token authorization. The project is open source under AGPL v3 and includes a Docker Compose deployment for self-hosting. Self-hosting requires a public server with ports 25, 80, and 443 open, plus keys for S3-compatible storage. Detected spam remains viewable in the web portal for seven days. The hosted service is EU-hosted on renewable energy. The Free plan costs nothing and includes five aliases and tracker blocking; the paid plan has no listed price and renews annually.