Overview
addy.io is a privacy-focused email alias tool that lets you generate unlimited forwarding addresses to shield your real inbox from spam, data breaches, and tracking. Originally launched as AnonAddy, the service rebranded to addy.io in 2023 and has since expanded into a mature platform with mobile apps, browser extensions, custom domain support, and integrations with privacy-centric partners like Tuta and Windscribe. The core premise remains simple: instead of handing out your actual email address, you create disposable aliases that route messages to your chosen recipient inbox. If an alias leaks or starts attracting junk, you deactivate it with a single click.
The platform sits at the intersection of Tool and Email alias categories, positioning itself as a no-KYC alternative to mainstream forwarding services. Unlike competitors owned by larger corporations, SimpleLogin, for instance, is now under Proton, addy.io remains independently operated. Users consistently praise its competitive pricing, polished UX, and direct cryptocurrency payment options, with community sentiment skewing strongly positive across privacy-focused forums.
Privacy & KYC
addy.io operates at KYC Tier L2, Discreet, meaning signup demands minimal personal data: typically just an email address. No government ID, no phone verification, no invasive questionnaires. For users seeking stronger anonymity, the service permits registration through its Tor onion mirror, a rarity among email providers that significantly reduces network-level exposure. However, prospective users should weigh some notable privacy limitations against this convenience.
- IP logging: The privacy policy confirms that Nginx access and error logs retain IP addresses, rotated daily and kept for three days. While this window is brief, it is not a strict no-logs posture.
- Email storage: Messages are not stored by default, but failed deliveries may be retained if you enable that option in account settings.
- Analytics: addy.io uses a self-hosted Umami instance for website analytics, which avoids third-party trackers and persistent identifiers.
- GDPR compliance: The service claims EU regulatory compliance, though the practical privacy score remains low due to the IP retention and server-side logging.
The privacy score of 5/100 reflects these logging practices, not malice, addy.io is transparent about its data handling, but it is not designed for users who require absolute anonymity against a sophisticated adversary. For everyday spam reduction and identity compartmentalization, the trade-off is reasonable.
Supported assets & payments
addy.io stands out among email alias providers for its broad, privacy-friendly payment acceptance. Users can subscribe using Monero (XMR), Bitcoin (BTC), and Lightning Network, alongside conventional fiat methods and even cash payments. This flexibility makes it one of the few email services where you can maintain financial pseudonymity alongside inbox pseudonymity. The direct Monero integration is particularly noteworthy, community feedback repeatedly cites it as a decisive factor favoring addy.io over SimpleLogin, which lacks comparable cryptocurrency support.
Subscription tiers follow a freemium model: a capable free plan covers basic aliasing needs, while Lite and Pro unlock custom domains, additional usernames, higher bandwidth limits, and perks like discounted partner services. Billing cycles are monthly or yearly, and users retain full control over cancellation without retention hassles.
Security & custody
As a non-custodial tool for email routing, addy.io does not hold user funds or private keys, your "custody" concern is limited to message transit and alias metadata. The security architecture is robust for this threat model. All mail servers employ TLS encryption with opportunistic DANE, MTA-STS, and TLS-RPT to prevent downgrade attacks and detect connection anomalies. DNSSEC is deployed across domains, and perfect forward secrecy (PFS) protects transport-layer sessions even if long-term server keys are compromised.
For users wanting end-to-end protection beyond transport, addy.io supports GPG/OpenPGP encryption per recipient. Bring your own public key, toggle encryption on, and forwarded messages arrive encrypted to you, including optional subject-line encryption. This is especially valuable if your destination inbox lives on a provider that scans content. The entire application stack is open-source, and an independent security audit was completed in 2023, adding verifiable assurance beyond trust-me promises.
Who it's for, verdict
addy.io is ideal for privacy-conscious individuals who want practical inbox compartmentalization without surrendering identity at signup. Journalists, researchers, crypto natives, and anyone exhausted by breach-driven spam will find genuine utility here. The Tor compatibility, Monero payments, and open-source codebase make it a compelling no-KYC choice in an increasingly consolidated market.
That said, the low trust score and minimal privacy score signal important caveats: this is not a hardened anonymity service. If your threat model includes state-level surveillance or requires zero network logging, self-hosting the open-source addy.io instance, or combining it with a trusted VPN and encrypted destination mailbox, is advisable. For the typical user seeking to de-clutter their digital life while minimizing data exposure, addy.io delivers strong value at a fair price, with a feature set that rivals or exceeds better-known competitors.
