Privacy policy

Last updated: October 27, 2026

What you paste

Email headers you paste are sent to our server, analysed in memory and discarded as soon as the result is returned. They are not written to disk, logged, or shared with anyone. The same applies to domain names you check.

Domain checks

To check a domain we query its public DNS records (SPF, DMARC, DKIM, MX, MTA-STS, TLS-RPT and BIMI). We do not contact the domain’s mail servers or send any email.

Abuse protection

To stop automated abuse we count how many checks come from each IP address in a short period. The address is stored only as a one-way hash, together with the times of the requests, and deleted within 24 hours.

Contact form

If you write to us, we receive your name, email address, message and IP address by email so we can reply. We don’t add you to any mailing list.

Cookies

We set one session cookie that protects the forms against cross-site attacks. It contains no personal information and is deleted when you close your browser.

We don’t use analytics or advertising cookies. If that changes, this page will say so before it happens.

Contact

Questions about privacy: send us a message.