Privacy

Draft. Have this reviewed before launch.

• Free scans: we store the domain, the result and the requesting IP address (to prevent abuse) for 90 days. Anyone with the report link can view it.
• Accounts: we store your email address, the domains you monitor, their scan history and alerts.
• DMARC reports: aggregate reports sent by mail providers contain sending IP addresses and message counts, not message content. We keep them for 12 months.
• Processors: Hetzner (hosting, EU), Resend (email), Dodo Payments (billing), Cloudflare (DMARC report email routing), Sentry (error logs).
• Your rights: email us to export or delete your data. Deleting your account removes your domains, scans and alerts.