┌──────────────────────────────────────────┐
  │  ░▒▓  SECURE CHANNEL ESTABLISHED  ▓▒░   │
  │  >>>  IDENTITY: ANONYMOUS           <<<  │
  │  >>>  TRACE:    NULL                <<<  │
  └──────────────────────────────────────────┘

EPHEMASK

Disposable email that self-destructs. No signup. No trace. No limits.

Ephemask is a serverless temporary email service that lets users receive disposable emails without registration. Inboxes auto-delete after a configurable TTL. Built with Go, Terraform, Astro, Svelte, and React Native.

Architecture

[Internet] → MX Record → [AWS SES Inbound]
                              ↓
                         [S3 Bucket] (raw email storage)
                              ↓
                         [Lambda - email-processor] (Go)
                              ↓
                         [DynamoDB] (parsed email metadata + body)
                              ↓ TTL auto-delete
                         [API Gateway] ← [Lambda - api] (Go)
                              ↓
                         [Frontend Web - Astro + Svelte]
                              ↓
                         [Frontend Mobile - React Native + Expo]

Flow: User gets a random address → SES receives email → S3 stores raw → Lambda parses MIME → DynamoDB stores with TTL → Frontend polls API → Data auto-destructs.

Tech Stack

Project Structure

ephemask/
├── terraform/               # AWS infrastructure (SES, DynamoDB, Lambda, API GW, Route53)
├── services/                # Go backend
│   ├── cmd/processor/       # Lambda: processes incoming emails from S3
│   ├── cmd/api/             # Lambda: REST API for frontend
│   ├── internal/email/      # MIME parser (enmime)
│   ├── internal/inbox/      # Models, repository (DynamoDB), service layer
│   ├── internal/handler/    # HTTP handlers
│   └── pkg/randaddr/        # Random address generator
├── packages/shared/         # Shared TypeScript package (@ephemask/shared)
├── apps/web/                # Astro + Svelte web frontend
└── apps/mobile/             # React Native + Expo mobile app

Getting Started

Prerequisites

• Go 1.22+
• Node.js 20+
• pnpm (npm install -g pnpm)
• Terraform 1.5+ (for infrastructure)
• AWS CLI configured (for deployment)

Install Dependencies

pnpm install

Run Go Tests

cd services && go test ./... -v

Run Web Frontend (dev)

pnpm --filter shared build
pnpm --filter web dev
# → http://localhost:4321

Run Mobile App (dev)

cd apps/mobile
npx expo start

Build Go Lambdas

make build-go

Deploy Infrastructure

make tf-init
make tf-plan
make tf-apply

API Endpoints

Business Model

Environment Variables

Notes

• AWS Region: us-east-1 (SES inbound only available in us-east-1, us-west-2, eu-west-1)
• SES Sandbox: Requires exit from sandbox for production receiving
• Security: Email HTML is sanitized before rendering (iframe sandbox on web, WebView on mobile)
• CORS: Configured on API Gateway for frontend domain

License

Private project.