Privacy
Last updated 26 September 2026.
The free email check
When you run the check, your browser sends the domain to this site's checker, hosted on Cloudflare. The checker requests public MX, SPF and DMARC records from Cloudflare's DNS resolver. When needed, it also checks parent domains for an inherited DMARC policy and compares current and legacy policy discovery. The checker processes the domain for that request and does not save a search history or log the request body or results.
The checker uses one shared limit across all visitors and locations. To enforce it, a Cloudflare Durable Object stores up to five recent check timestamps, without domains, IP addresses, or results. Cloudflare also uses your IP address to limit rapid repeat requests. Your browser stores a short cooldown timestamp locally so refreshing the page does not remove the wait between checks. That timestamp contains no domain or results.
If you open a printed finding link or QR code, its domain is included in the page URL. That URL may appear in your browser history and Cloudflare's server logs.
This website
The site's own code adds no advertising trackers or account cookies. Fonts load from Google Fonts. Cloudflare hosts the site and keeps operational logs; its hosting features may also provide traffic analytics. The domain in a printed finding link can appear in a page URL and infrastructure logs.
When you contact me
If you email jmarc@smallofficesecurity.com, I use the contact details and information you provide to reply and, if you become a client, to do the work. I do not sell or share them. Ask me to delete them at any time.
Client work
Anything I see while working on your systems is covered by our written agreement, and for healthcare clients by a business associate agreement. I do not keep client data on my own devices.