Your email is the master key to your digital life. It receives your password resets, your bank alerts, your medical appointments, your entire purchase history. Whoever watches your email watches you.
The uncomfortable part is that a lot of watching is happening. Marketing emails report when and where you open them. Data brokers trade address lists. “Free” services pay for themselves with your data, a lesson our own category learned the hard way in 2017.
The good news is that email privacy is a solved problem, as long as you stop looking for one magic tool. It takes four small ones, each covering a layer the others can’t reach.
Short answer. Protect the connection with a trusted VPN, your identity with aliases, your inbox with an unsubscribe and blocking tool, and your files with end-to-end encryption. Four layers, one tool each, no overlap.
The four layers
Layer 1: your connection
The threat. On any network you don’t own, cafe wifi, hotels, airports, the operator can see where your traffic goes, and a malicious hotspot can go further. Your internet provider logs which services you use.
The fix. A VPN encrypts everything between you and its servers, so local snoops see noise. Pick one whose business model is subscriptions, not your data. We wrote about how to tell an honest free VPN from a data trap, and about what a VPN does and doesn’t do for email, because this layer gets oversold: it protects the pipe, nothing else.
Layer 2: your identity
The threat. Every signup with your real address is a copy of your identity in someone else’s database, waiting to be leaked, sold, or merged into a profile of you.
The scale. Have I Been Pwned’s public breach list held 1,036 breaches as of September 2026. 1,029 of them exposed email addresses, and 674 exposed passwords. Your address is the identifier that ties those records to each other.
The fix. Aliases. A different forwarding address for every service, so no two databases hold the same identifier, and any address that leaks or spams gets deleted without touching your real one. Here’s how aliases work in practice, and for the cases where you want zero connection to yourself, burners.
Layer 3: your inbox
The threat. The mail already reaching you is watching you. Most marketing emails embed tracking pixels that report your opens, times and rough location. And spam that ignores unsubscribe requests keeps your address circulating on broker lists.
The fix. Ruthless inbox hygiene: unsubscribe from every list you don’t read, block the senders that won’t listen, strip the trackers. That’s the layer we build. Leave Me Alone unsubscribes you from anything in one click and blocks what refuses to leave, and we never sell your mail data. That last part isn’t a slogan, it’s the business model: you pay, so you’re the customer.
Layer 4: your files and memories
The threat. The attachments, photos and documents that flow through your accounts end up stored on servers you don’t control, readable by whoever runs them, under policies that can change with one email titled “we’ve updated our terms”.
The fix. End-to-end encryption for what matters: files and photos encrypted on your device before upload, so the provider physically can’t read them. It’s why we partnered with Ente for photos: open source, encrypted, and they can’t see your library even if they wanted to.
Building your stack, in order
Start where the leverage is.
- Clean the inbox first. It takes ten minutes, and it shrinks your exposure everywhere else: fewer lists holding your address means fewer leaks with your name on them.
- Switch new signups to aliases today. You don’t have to migrate old accounts overnight. From now on, every new service gets its own address.
- Add the VPN for when you’re out. On your home network it’s optional. On networks you don’t own, it should be automatic.
- Move the crown jewels to encrypted storage. Start with photos, the most personal thing most of us have.
Frequently asked questions
Do I really need all four layers?
Each layer stops a different attack, so skipping one leaves that door open. But you don’t need them all on day one. Inbox first, identity second, the rest as you go.
Isn’t a privacy-focused email provider enough?
It helps, mostly at layer 4 for your mail itself, but it can’t unsubscribe you from tracking lists, won’t alias your signups by itself, and does nothing for your connection. Provider choice is one piece, not the stack.
Does this cost much?
Less than the “free” alternative. Every tool in an honest privacy stack runs on subscriptions, usually a few euros each per month. The free versions of these categories historically paid for themselves with user data, which is the exact thing you’re trying to stop.
What’s the single biggest quick win?
Unsubscribing from everything you don’t read. It cuts tracking, shrinks your leak surface, and makes every other layer’s job smaller. Then aliases for everything new.
Bottom line
Email privacy isn’t a product, it’s a posture: one honest tool per layer, each doing a job the others can’t. Clean inbox, aliased identity, encrypted pipe, encrypted storage. Build it once, and the watching mostly stops.
