Privacy policy

Checks

When you run a check, the domain (and any DKIM or BIMI selector) you enter is sent to our server, which queries public DNS resolvers (Cloudflare 1.1.1.1 and Google Public DNS) and, for MTA-STS, fetches the domain's public policy file. We do not store the domains you check in a database. Our hosting provider, Cloudflare, processes standard request logs (such as IP address and URL) to operate and protect the service.

Generators

The SPF, DMARC and BIMI generators run entirely in your browser. DKIM key pairs are generated with your browser's Web Crypto API; the private key is never sent to us.

Monitoring

If you sign up for monitoring, we store your email address, the domain, confirmation and unsubscribe tokens, timestamps, a truncated hash of your IP address (used only to limit abuse), and the daily check results for that domain. We use your email address only to send the confirmation email and alerts about the domains you added. You can unsubscribe at any time with the link in every email; we then stop sending alerts. Emails are delivered through our email provider (Resend).

Analytics

We use Google Analytics 4 to understand which pages are used. It sets cookies and collects information such as pages viewed, approximate location and device type. You can block it with your browser's settings or an extension.

Sharing

We do not sell personal information. We share it only with the service providers named above, to run the site, or where required by law.

Your choices

To access or delete monitoring data, email hello@emailmonitor.com.