Privacy Policy

1234.club (“we”, “us”, “our”) operates an email alias forwarding service. This Privacy Policy explains what data we collect, why we collect it, and how we protect it. We take privacy seriously — we do not sell your data, we do not read your emails, and we collect only what we need to run the service.

Account information

When you create an account we collect your name (optional), email address, and a hashed password. This is used to authenticate you and associate your aliases with your account.

Forwarding address

You provide a destination email address where we forward incoming mail. We store this address to perform the forwarding. We verify it by sending a confirmation email before forwarding begins.

Email metadata (not content)

When an email arrives at your alias, we log the sender's email address, the subject line, the timestamp, and the delivery status (forwarded / failed). We do not store, scan, or analyze the body or attachments of forwarded emails. Email content passes through our systems in memory only and is not persisted.

Payment information

Payments are processed by Stripe. We never see or store your full card number. We receive a Stripe customer ID and subscription status. See Stripe's Privacy Policy for details on how they handle payment data.

Usage data

We collect basic server logs (IP address, pages visited, timestamps) for security monitoring and debugging. These are not linked to your account for marketing purposes and are retained for a maximum of 90 days.

• To create and manage your account
• To forward emails from your alias to your inbox
• To send you transactional emails (verification, receipts, service notices)
• To process payments and manage subscriptions
• To detect and prevent abuse, spam, and fraud
• To comply with legal obligations

We do not use your data for advertising or sell it to third parties. We do not use email content for any purpose other than forwarding it to you.

We rely on the following infrastructure providers to deliver the Service:

All providers are contractually bound to handle data securely and only as instructed by us.

We use a single session cookie to keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics. We do not fingerprint your device or track you across other websites.

We retain your account data for as long as your account is active. Email delivery logs (sender, subject, status) are retained for up to 12 months and then automatically deleted. If you delete your account, all personal data is permanently removed within 30 days, except where we are required to retain it by law (e.g., payment records for tax purposes, retained for 7 years).

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — receive your data in a machine-readable format
• Objection — object to processing in certain circumstances

To exercise any of these rights, email privacy@1234.club. We will respond within 30 days.

We use industry-standard security measures including TLS encryption in transit, hashed passwords (bcrypt), encrypted database storage, and access controls. No system is 100% secure; in the event of a data breach we will notify affected users within 72 hours where required by law.

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the website at least 14 days before they take effect. Your continued use of the Service after changes constitutes acceptance.

For privacy-related questions or requests, contact us at privacy@1234.club.

For general support: support@1234.club.