Privacy

Plain language, verbatim from how the system actually works:

What we store

• The domain you scanned, kept 30 days for anonymous scans, then deleted (kept for your account's monitors once accounts exist).
• The scan results.
• A hashed IP address (we cannot recover the original).
• A browser family like "chrome" or "curl", never the full user agent.
• A first-party visitor cookie (random id, 1 year) and referrer/UTM of how you arrived.

What we don't store

• Raw IP addresses.
• Full user agent strings.
• Anything you type in the DKIM selector box beyond serving that request.

Honesty rules

• We never show a value we didn't observe. If a check couldn't run, the report says so.
• No third-party analytics or ads. One cookie, ours.
• Free scans may show a one-line note about Dyve Technology (the company behind DNSDeets). Paid plans won't.

Questions? Send feedback.