Privacy policy

1. What this page covers

DMARC Checker (dmarcchecker.page) is a small web tool run by an independent developer. This policy explains what the tool does with the domain name you enter, what leaves your browser, what the website collects, and the choices you have. The short version: your files and text are processed inside your browser and are not uploaded to us or to anyone else.

2. The domain you enter

The tool works in your browser. The domain name and the optional DKIM selector you type, the DNS answers and the report built from them stay in the browser's memory. Nothing from the form or the result is sent to our server, which only delivers the pages, scripts and styles of the site. When you close the tab, the browser discards the report. The "Share link" button puts the domain after a # in the address; that part of an address is never sent to any server, including ours.

3. DNS lookups

To read the records, your browser asks a public DNS resolver over HTTPS, the same question any mail server asks before delivering mail. The resolver is Cloudflare (cloudflare-dns.com); if it does not answer, the browser tries Google Public DNS (dns.google). What goes to the resolver: the domain name you typed, the names built from it (_dmarc., _domainkey. with selector names, _report._dmarc.) and the record type, TXT. Like every DNS query, the request also carries your IP address to the resolver. What does not go anywhere: the result, the suggested records, anything you copy. We never see the domain, the answer or your IP, and we keep no record of them. Cloudflare states that it does not keep the client IP address of resolver queries in permanent storage and deletes its query logs within 25 hours; Google states that its temporary logs with IP addresses are deleted within 24 to 48 hours and its permanent logs hold no IP address. Their policies: Cloudflare 1.1.1.1 resolver privacy, Google Public DNS privacy. These two hosts are the only addresses the page is allowed to contact; the site's security policy blocks every other request.

4. Cookies and analytics

The site uses Google Analytics 4 to count visits and to see which pages are useful. We never send Google Analytics the domain you enter or any part of the result. Advertising features are off for everyone, and we do not share analytics data with anyone else.

If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies are off by default. Google works out your country from your IP address. Without your consent Google Analytics sets no cookies and stores no identifier on your device; the Google script still loads and can send Google a basic signal without a cookie: the page you opened, the time, your browser and device type, and your approximate location.

Everywhere else, analytics cookies are on by default. Google Analytics sets cookies named _ga and _ga_ followed by the property code, which can last up to two years, and processes the same technical data.

Your choice. If your browser's time zone is in Europe, the pages ask "Allow analytics cookies?" Yes and No take one click each. The answer is kept in your browser's local storage and applies to the whole site. You can change it any time with the "Cookie settings" link at the bottom of the tool, guide and privacy pages: choosing No removes the _ga cookies this site has set. You can also block cookies in your browser; the tool works the same without them.

Your browser connects to Google to load the analytics script, so Google sees your IP address. Google states that Google Analytics 4 uses it to estimate location and does not store it. Statistics are kept for 14 months.

5. Server logs

Like every website, our server writes a technical log of requests: the IP address, the time, the page address and the browser type. The site is served through Cloudflare, which also sees this traffic and protects the site from abuse. We use logs only to keep the site running and to look into errors; they are deleted after a short time.

6. Advertising

There are no ads on this site at the moment. If we add them later, this page will say so first, together with what the ad partner can see.

7. Children

The site is not aimed at children under 16 and knowingly collects no data from them.

8. Your rights

Depending on where you live, you may have the right to access, correct or delete personal data, to object to its processing, or to complain to a data protection authority. Because we hold no accounts, no domains and no results, in practice there is nothing about you to look up; analytics data is pseudonymous and is handled by Google under its own policy.

9. Contact

Questions about this policy: [email protected].

10. Changes

When the tool or the site changes in a way that matters for this policy, we update this page and the date at the top.