Pipeline
One product on mailby.app. Mail still arrives via MX mail.mailby.app — clean separation between web and SMTP.
Your browser gets a private session cookie on mailby.app. That session — not the email address — authorizes read access.
Mailby creates an address on mailby.app (random or custom local-part) with a receive window and retention clock.
Senders deliver SMTP to mail.mailby.app. Postfix checks the recipient, then hands off over private LMTP.
Workers parse MIME, encrypt objects at rest, sanitize HTML, and extract OTPs and links for one-click copy.
Your session reads a safe preview. When retention ends — or you delete — access is revoked and content is purged.