Reviewing what you have

Aliases work, so you make more of them. After two years you have ninety, and the value of one address per relationship collapses if you cannot see the relationships any more.

/aliases/review groups them by what you might want to do.

The groups

Heard from more than one company. You gave the address to one place and mail is arriving from somewhere else. That is the address being passed on, sold, or breached, and it is the whole reason you use aliases. Delete it. You now know exactly who leaked it, and nothing else you own is affected.

Never heard from anyone. Created and nobody has ever written. Usually a signup that did not complete. Safe to delete, remembering that the address is then reserved forever rather than recycled.

Expiring within a week. Burners you set an end date on. Extend the ones you still want.

No new sender in 180 days. Worth a look. Read the caveat below before deleting anything from this group.

Turned off but still here. They already refuse mail and they keep their address reserved. A disabled alias costs nothing, so there is no rush.

What we cannot tell you, and why

The obvious way to build this page would be "last received mail". We do not have that.

Delivery records are deleted after a few days. That is deliberate, it is on the privacy page, and it is the same decision that makes a legal request against us yield so little: we would rather be unable to reconstruct who writes to you than have a nicer dashboard.

What does last is the list of senders each alias has heard from, which is enough for the two groups that matter.

So "no new sender in 180 days" means exactly that, and not "no mail". A newsletter that has written every week for three years produces exactly one sender, dated three years ago, and lands in that group. Check before deleting. We would rather show you a slightly blunt signal with a warning attached than imply a precision we do not have.

Deleting is permanent for the address

An alias goes to the trash for 30 days and can be restored. The address is reserved forever afterwards. We never recycle one, because whoever got yours next would receive your password resets.

That is worth knowing before a clean-out: deleting forty unused aliases is fine, and it does not free anything up.

Something here wrong or missing? Tell us. These pages live in the same repository as the code, so a correction is a one-line change.