Privacy

Email headers and .eml files

The header analyzer runs as JavaScript in your browser. Headers you paste and .eml files you open are processed on your device and are not uploaded or sent anywhere. From an .eml file only the header part at the start of the file is read. Nothing is saved: closing or reloading the page discards it.

Domain lookups

The SPF, DMARC, DKIM, MX, domain health and SPF generator tools need DNS data. For that, your browser sends the DNS names being looked up, such as example.com, _dmarc.example.com, selector._domainkey.example.com or the domains named in an SPF record, to Cloudflare’s public DNS resolver (1.1.1.1) at https://cloudflare-dns.com/dns-query, encrypted over HTTPS. Cloudflare’s own privacy commitments for its public resolver apply to those queries. No headers, results or other tool input are sent anywhere.

Results can be shared through the part of the address after #, for example /spf-checker/#domain=example.com. Browsers do not send that part to the web server.

Cookies, analytics and storage

• The site uses Cloudflare Web Analytics, which Cloudflare adds to the pages it serves. It counts page views without cookies or cross-site tracking, and it never receives what you type, paste or drop into the tools.
• No cookies, advertising, cross-site trackers or accounts, and no analytics of the site’s own.
• If you change the colour theme, the choice (light or dark) is stored in your browser’s local storage, on your device only.

Hosting

The site’s static files are served by Cloudflare. As with any website, your browser’s requests for these pages, including your IP address and browser details, reach the hosting network in order to be answered.

Links to other sites

Links to other websites, such as the sister sites in the footer, CleanTempMail or WebTraceCheck, take you to those sites, and their own privacy policies apply there.