Firefox Private Relay

relay.firefox.com
Firefox Private Relay

Developed and managed by Mozilla, Relay is a Firefox addon, that lets you make an email alias with 1 click, and have all messages forwarded onto your personal email. Relay is totally free to use, and very accessible to less experienced users, but also open source, and able to me self-hosted for advanced usage.

Open Source

Firefox Private Relay Privacy Policy

Privacy Policy Summary

  • Your browser's Do Not Track (DNT) headers are respected

Score

C

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #4158

Firefox Private Relay Source Code

Author

mozilla

Description

Keep your email safe from hackers and trackers. Make an email alias with 1 click, and keep your address to yourself.

Homepage

https://relay.firefox.com

Repository

  • LicenseOther
  • Created06 Jun 19
  • Primary languagePython
  • Size64,459 KB
  • Stars1,771
  • Forks274
  • Watchers1,771

Language Usage

Language Usage

Project Health

  • Last commit3 days ago
  • Open issues38
  • Latest releasev3.6.1

Recent Commits

  • Joe(13 Aug 26)

    Merge pull request #6802 from mozilla/mpp-4746-drop-duplicate-headers fix(emails): drop duplicate MIME-Version and Content-Type headers

  • groovecoder(13 Aug 26)

    fix(emails): drop duplicate MIME-Version and Content-Type headers Some senders emit the same header twice. SES refuses a message with a duplicate header, so the forward failed and the email was lost. In production that was about 1,170 rejections a day, 93% of every SES rejection Relay saw. _replace_headers keeps mime-version and every content-* header from the incoming email, because those describe a body Relay reuses rather than rebuilds. Dropping them is not an option: without Content-Type the MIME boundary is gone and Python cannot even serialize the message. But the rule only said which headers to keep, never how many of each. Headers outside that set were already collapsed as a side effect, because deleting a header removes every copy of it. Collapse each duplicated kept header to its first value and record the count in the forwarding issues log. That log entry is the first telemetry Relay has had on duplicate headers. Reassign the parsed header object rather than the raw string. A folded raw value contains newlines, and the email policy refuses to store those. The duplicate arrives from outside. Relay never writes MIME-Version, and the three places the email library writes it either delete first or check for an existing header. A clean incoming email still produces exactly one top-level MIME-Version end to end. See MPP-4746.

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6786 from mozilla/dependabot/npm_and_yarn/nextjs-924d055406 build(deps): bump @next/third-parties from 16.2.12 to 16.3.0 in the nextjs group

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6785 from mozilla/dependabot/npm_and_yarn/eslint-6c6f53d708 build(deps-dev): bump eslint-plugin-jest-dom from 5.5.0 to 5.10.1 in the eslint group

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6787 from mozilla/dependabot/pip/boto-201b972a92 build(deps): bump the boto group with 2 updates

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6788 from mozilla/dependabot/npm_and_yarn/testing-library-e10155f593 build(deps-dev): bump @testing-library/user-event from 14.6.1 to 14.6.3 in the testing-library group

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6789 from mozilla/dependabot/pip/testing-libraries-28a4060e6b build(deps): bump coverage from 7.15.2 to 7.15.3 in the testing-libraries group

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6790 from mozilla/dependabot/pip/typing-stubs-21cbbe328d build(deps): bump djangorestframework-stubs from 3.17.0 to 3.17.1 in the typing-stubs group

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6792 from mozilla/dependabot/npm_and_yarn/lint-staged-17.3.0 build(deps-dev): bump lint-staged from 17.2.0 to 17.3.0

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6793 from mozilla/dependabot/npm_and_yarn/swr-2.5.0 build(deps): bump swr from 2.4.2 to 2.5.0

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6796 from mozilla/dependabot/npm_and_yarn/playwright/test-1.62.1 build(deps-dev): bump @playwright/test from 1.62.0 to 1.62.1

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6797 from mozilla/dependabot/pip/ruff-0.16.1 build(deps): bump ruff from 0.16.0 to 0.16.1

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6798 from mozilla/dependabot/pip/phonenumbers-9.0.36 build(deps): bump phonenumbers from 9.0.35 to 9.0.36

  • mozilla-blender[bot](12 Aug 26)

    Merge pull request #6799 from mozilla/dependabot/pip/drf-spectacular-sidecar-2026.8.1 build(deps): bump drf-spectacular-sidecar from 2026.7.1 to 2026.8.1

  • dependabot[bot](12 Aug 26)

    build(deps): bump drf-spectacular-sidecar from 2026.7.1 to 2026.8.1 Bumps [drf-spectacular-sidecar](https://github.com/tfranzel/drf-spectacular-sidecar) from 2026.7.1 to 2026.8.1. - [Commits](https://github.com/tfranzel/drf-spectacular-sidecar/compare/2026.7.1...2026.8.1) --- updated-dependencies: - dependency-name: drf-spectacular-sidecar dependency-version: 2026.8.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps): bump phonenumbers from 9.0.35 to 9.0.36 Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers) from 9.0.35 to 9.0.36. - [Commits](https://github.com/daviddrysdale/python-phonenumbers/compare/v9.0.35...v9.0.36) --- updated-dependencies: - dependency-name: phonenumbers dependency-version: 9.0.36 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps): bump ruff from 0.16.0 to 0.16.1 Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.0 to 0.16.1. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.0...0.16.1) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps-dev): bump @playwright/test from 1.62.0 to 1.62.1 Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.62.0 to 1.62.1. - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](https://github.com/microsoft/playwright/compare/v1.62.0...v1.62.1) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps): bump swr from 2.4.2 to 2.5.0 Bumps [swr](https://github.com/vercel/swr) from 2.4.2 to 2.5.0. - [Release notes](https://github.com/vercel/swr/releases) - [Commits](https://github.com/vercel/swr/compare/v2.4.2...v2.5.0) --- updated-dependencies: - dependency-name: swr dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 17.2.0 to 17.3.0. - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.2.0...v17.3.0) --- updated-dependencies: - dependency-name: lint-staged dependency-version: 17.3.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps): bump djangorestframework-stubs in the typing-stubs group Bumps the typing-stubs group with 1 update: [djangorestframework-stubs](https://github.com/typeddjango/djangorestframework-stubs). Updates `djangorestframework-stubs` from 3.17.0 to 3.17.1 - [Release notes](https://github.com/typeddjango/djangorestframework-stubs/releases) - [Commits](https://github.com/typeddjango/djangorestframework-stubs/compare/3.17.0...3.17.1) --- updated-dependencies: - dependency-name: djangorestframework-stubs dependency-version: 3.17.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: typing-stubs ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps): bump coverage in the testing-libraries group Bumps the testing-libraries group with 1 update: [coverage](https://github.com/coveragepy/coveragepy). Updates `coverage` from 7.15.2 to 7.15.3 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](https://github.com/coveragepy/coveragepy/compare/7.15.2...7.15.3) --- updated-dependencies: - dependency-name: coverage dependency-version: 7.15.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: testing-libraries ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps-dev): bump @testing-library/user-event Bumps the testing-library group with 1 update: [@testing-library/user-event](https://github.com/testing-library/user-event). Updates `@testing-library/user-event` from 14.6.1 to 14.6.3 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](https://github.com/testing-library/user-event/compare/v14.6.1...v14.6.3) --- updated-dependencies: - dependency-name: "@testing-library/user-event" dependency-version: 14.6.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: testing-library ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps): bump the boto group with 2 updates Bumps the boto group with 2 updates: [boto3](https://github.com/boto/boto3) and [boto3-stubs](https://github.com/youtype/mypy_boto3_builder). Updates `boto3` from 1.43.57 to 1.43.63 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](https://github.com/boto/boto3/compare/1.43.57...1.43.63) Updates `boto3-stubs` from 1.43.57 to 1.43.63 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.63 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto - dependency-name: boto3-stubs dependency-version: 1.43.63 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps): bump @next/third-parties in the nextjs group Bumps the nextjs group with 1 update: [@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties). Updates `@next/third-parties` from 16.2.12 to 16.3.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.0/packages/third-parties) --- updated-dependencies: - dependency-name: "@next/third-parties" dependency-version: 16.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nextjs ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](12 Aug 26)

    build(deps-dev): bump eslint-plugin-jest-dom in the eslint group Bumps the eslint group with 1 update: [eslint-plugin-jest-dom](https://github.com/testing-library/eslint-plugin-jest-dom). Updates `eslint-plugin-jest-dom` from 5.5.0 to 5.10.1 - [Release notes](https://github.com/testing-library/eslint-plugin-jest-dom/releases) - [Commits](https://github.com/testing-library/eslint-plugin-jest-dom/compare/v5.5.0...v5.10.1) --- updated-dependencies: - dependency-name: eslint-plugin-jest-dom dependency-version: 5.10.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: eslint ... Signed-off-by: dependabot[bot] <[email protected]>

  • Joe(11 Aug 26)

    Merge pull request #6732 from mozilla/dependabot/npm_and_yarn/typescript-7.0.2 build(deps-dev): bump typescript from 6.0.3 to 7.0.2

  • Joe(10 Aug 26)

    Merge pull request #6781 from mozilla/dependabot/github_actions/actions/setup-python-7 build(deps): bump actions/setup-python from 6 to 7

  • Joe(10 Aug 26)

    Merge pull request #6783 from mozilla/blender/security-bump-django Bump django to 5.2.16 (security)

  • mozilla-blender[bot](10 Aug 26)

    Bump django to 5.2.16 Resolves security alert #202.

Firefox Private Relay Security

5.5/10

Repo Security Summary

Updated 27 Jul 26

  • Code-Review0/10
  • Maintained10/10
  • Dangerous-Workflow10/10
  • Token-Permissions0/10
  • CII-Best-Practices0/10
  • Binary-Artifacts10/10
  • Security-Policy0/10
  • Fuzzing0/10
  • License9/10
  • Signed-ReleasesN/A
  • Branch-ProtectionN/A
  • Pinned-Dependencies2/10
  • SAST10/10
  • Packaging10/10

Firefox Private Relay Website

Website

Firefox Relay

⁨Firefox Relay⁩ makes it easy to create email masks that forward your messages to your true inbox. Use them to protect your online accounts from hackers and unwanted messages.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address151.101.193.91
  • LocationSan Francisco,California,United States of America,NA
  • ISPFastly Inc.
  • ASNAS54113

Associated Countries

  • USUS

Safety Score

Website marked as safe

100%

Blacklist Check

relay.firefox.com was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

Firefox Private Relay Reviews

More Mail Forwarding

About the Data: Firefox Private Relay

Edit Firefox Private Relay Data

You can edit Firefox Private Relay's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

API

You can access Firefox Private Relay's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/firefox-private-relay

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Firefox Private Relay

Help your friends compare Mail Forwarding, and pick privacy-respecting software and services.
Share Firefox Private Relay and Awesome Privacy with your network!