Ricardo's World Security Package

Your real inbox.
Exposed Hidden from everyone but you.

GhostMyMailBox stands between your real email address and the rest of the internet. We hand out a disposable alias, quietly forward everything to the inbox you actually check, and swap the alias out the instant we spot trouble — so a leak somewhere else doesn't become spam in your inbox forever.

Get the Security Package See how it works

Alias auto-rotates on breach

Forwarding stays private

Bundled with the Security Package

Alias forwarding · Breach monitoring · Automatic rotation · Stripe-linked billing · Part of the Security Package · Alias forwarding · Breach monitoring · Automatic rotation · Stripe-linked billing · Part of the Security Package ·

How it works

Four steps, running quietly in the background

No app to install, nothing to configure. As long as your Security Package subscription is active, GhostMyMailBox does its job automatically.

You subscribe

Your subscription status and billing record live in Ricardo's World's Stripe account and database — that's how we confirm you're covered.

We generate an alias

You get a unique @ghostmymailbox.com address. This is the only address you hand out publicly — never your real one.

Mail gets forwarded

Everything sent to your alias is silently relayed to the personal email address you configured with us beforehand.

Breach? We rotate it

If we detect your alias was part of a leak, we attempt to automatically issue you a fresh one — cutting off the spam at the source.

Under the hood

What happens when a leak is detected

Think of the alias as a wall between you and the site that leaked. When the wall gets tagged, we build a new one — before the spam has a chance to reach you.

Alias active

Your alias sits quietly on file with the service you signed up for.

→

Breach detected

That third party gets breached and your alias surfaces in leaked data.

→

Auto-rotation attempt

We try to automatically retire the exposed alias and issue you a new one.

→

Inbox stays clean

Spam keeps hitting the retired alias. Your real inbox never sees it.

Let's be straight with you

Extra protection — not a magic shield

GhostMyMailBox meaningfully reduces the damage a data breach can do to your inbox. It is not, and cannot honestly be marketed as, 100% waterproof. Here's exactly where the line sits.

Where your real email address actually lives depends on your subscription status. While your Security Package subscription is active, your real address is kept only in our hosting infrastructure — purely so we can forward your mail — and it is not stored in the application database. Once your subscription is no longer active, your real address moves into Stripe and our own database instead, so we can still bill you and let you resubscribe. Two very different scenarios can put your data at risk, and they don't carry the same consequences:

Low risk

A database leak while you're an active subscriber

If our application database were ever exposed while your subscription is active, your real email address simply isn't in there to begin with — it only lives in the hosting infrastructure at that point. There isn't a plain, direct line from "leaked database record" back to your real inbox.

Real risk

A hosting breach, or a database leak after you've lapsed

Your real email does live somewhere: in the hosting infrastructure while you're subscribed, and in Stripe plus our own database once you're not. A compromise of whichever one currently holds it — the hosting environment itself, or Stripe/our database after a lapsed subscription — could expose your real address.

What we actually do about it: we work continuously to lock down our hosting infrastructure against unauthorized access, keep access to Stripe and our database tightly restricted, and follow security best practices to make either scenario as unlikely as we possibly can. But no honest security product gets to promise "impossible" — only "unlikely, and we're actively working to keep it that way." GhostMyMailBox is one solid layer of defense in the Security Package, not an unbreakable one.

What's included

Everything runs on top of your Security Package

One alias, one purpose

A dedicated @ghostmymailbox.com address tied only to your account — never reused or shared.

Silent forwarding

Mail lands in the inbox you actually use, exactly as if it were sent there directly.

Automatic rotation

When a breach involving your alias is picked up, we attempt to swap it out for you automatically.

Tied to your subscription

Protection stays active for as long as your Security Package subscription is active — nothing extra to manage.

Verified via Stripe

We check your subscription status directly against our Stripe records, so protection never lapses without you knowing.

Less spam over time

Because your real address never touches the public web, the sites and forms you sign up for can't leak it directly.

We also update it upstream

For third parties we've shared your email with on your behalf — like our merch supplier or shipment tracking updates — we try to swap your address there too, wherever their system allows it.

FAQ

Questions people actually ask

Is GhostMyMailBox a standalone product I can buy?+

No. GhostMyMailBox is a feature bundled into Ricardo's World's Security Package. You manage your subscription, billing, and forwarding address from the Security Package dashboard, not from this site.

What happens if I cancel my subscription?+

Once your Security Package subscription is no longer active, your alias stops forwarding mail and is no longer protected against rotation on a breach.

Where does my real email address live?+

It depends on your subscription status. While you're an active subscriber, it's kept only in our hosting infrastructure, purely so we know where to forward your mail — it isn't in the application database at that point. Once your subscription lapses, it moves into Stripe and our own database instead, so we can still bill you and let you resubscribe.

Is this 100% protection against spam and leaks?+

No, and we won't tell you it is. It's a real layer of protection that makes the common leak scenario harmless. It cannot protect you from a compromise of the hosting infrastructure itself — see "The fine print" section above for the full explanation.

Can I use my alias on other websites too, not just Ricardo's World?+

Nothing technically stops you from handing your GhostMyMailBox alias out to other sites and services — we can't enforce that. But officially, the alias is issued for your Ricardo's World account only, and that's the only use case it's supported for. If your account ever gets suspended, or your subscription lapses and you later re-subscribe and get issued a brand-new alias, you will lose access to any other accounts you registered with the old one. That's entirely on you — use it elsewhere at your own risk.

Do you also update my email with providers you've shared it with, like the merch supplier?+

We try. If we've shared your email with a third party to deliver part of the service — our merch supplier, a shipment tracking & update provider, or similar — we attempt to update your address on file with them too when your alias rotates, so those orders and updates keep reaching you. Whether that succeeds depends entirely on whether that provider's own system supports changing an email address after the fact. If it doesn't, that's a limitation on their end, not something we or you can fix — they will simply keep using the email address our system had on file for you at the time we originally shared it with them, from before you had the Security Package.

How fast does the alias rotate after a breach?+

Rotation is attempted automatically as soon as a breach involving your alias is detected. It's a best-effort process, not an instant guarantee.

Stop handing out your real address

GhostMyMailBox is included with Ricardo's World's Security Package. Manage your alias, forwarding address, and subscription from there.

Go to the Security Package →

Your real inbox. Exposed Hidden from everyone but you.