Privacy Policy

// DATA COLLECTION

We collect the minimum amount of data required to provide our service:

• User Data: Your email address is stored in our SQLite database for authentication (OTP) and delivery of reports.
• Service Data: We use an Umami instance for basic, privacy-friendly analytics.
• Cookies: We use a single HTTP cookie to manage your logged-in session.

// DMARC DATA PROCESSING

Our service processes DMARC aggregate (XML) reports on your behalf. These reports contain IP addresses of servers sending mail using your domain.

• Retention: Raw XML data is stored in isolated queues for a maximum of 23-24 hours.
• Purge: After generating your Daily Digest, all source XML files are permanently deleted.
• Zero Sharing: We never sell or share your DMARC data with third parties.

// PAYMENTS

Payments are handled via Paddle. We do not store or process your credit card information on our servers.