Privacy
Last updated 26 October 2026. Questions or deletion requests: hello@mailpassed.com.
The checker and the other tools
- Domain checker, generators, SPF include directory, certificate check: they read public DNS records and public certificates. No account. Results are kept in server memory, not on disk, for at most a day so repeat views load fast. Pasted certificates are read and discarded, not saved.
- Rate limiting: your IP address is kept in memory for 10 minutes to limit fresh checks per network. It is not written to disk.
- Page counts: we count views per page per day, with the referring site (for example "google") and whether the visitor
looks like a bot. No IP address, cookie or user agent is stored. Visits that arrive from AI assistants are logged as hour,
assistant name and page. Clicks on our outbound links (
/go/…) are logged as hour, link and the page it was on. - No cookies, no analytics or ad scripts, no third-party trackers.
Things you give us
- Free DMARC monitoring: the email address and domain you sign up with, and the DMARC aggregate reports that mailbox providers send for that domain (sending IPs, counts and SPF/DKIM results). Used only to build your dashboard and alerts.
- Send-a-test-email: for each test we keep the analysis of the message you send (sender address and domain, subject, sending IP and host name, SPF, DKIM and DMARC results) for 7 days, then delete it. The message body is not stored.
- Waitlist and feedback forms: what you type (email address, domain count, the page and your comment).
- $9 fix plan: your license key is checked with Gumroad. We log the hour, a hash of the domain and the use count, not the key, your IP or your email. Gumroad handles payment as merchant of record; see Gumroad's privacy policy.
Where it lives and who sees it
On one server we rent from OVHcloud, readable only by the site operator. We don't sell or share it and don't use it for advertising. Links to Fiverr and Gumroad take you to their sites, under their own privacy policies.
Claude plugin and API
Our free Claude plugin runs DNS lookups on your own computer. It contacts this site only when you ask for a mailpassed
report: then the domain name you ask about is sent to /api/check, handled like a check on the website.
Deleting your data
Email hello@mailpassed.com from the address you used, and we delete your monitoring account, reports, waitlist entry or feedback within 7 days.