What we collect

• Account: your email address, a hashed password (we cannot read it), and an optional company name.
• Your lists: the files or pasted addresses you submit, including any other columns in them (such as names and companies), and the result for each address.
• Billing: payments are handled by Stripe. We store your Stripe customer reference, your plan and your subscription status. We never see or store your card number.
• Usage and logs: how many checks you run, and technical logs such as IP addresses and request times, used to run, secure and troubleshoot the service.

Cookies and tracking

We use only the cookies needed to keep you signed in:

• access: keeps you signed in. It lasts 15 minutes and exists only after you sign in.
• refresh: renews your sign-in without asking again. It lasts 30 days and exists only after you sign in.
• ec_consent: remembers your cookie choices. It is stored in your browser and never sent to us.

We do not use analytics, advertising or social-media pixels, session recording or replay, chat widgets, or other third-party scripts, and this site does not load fonts or code from other companies, so visiting it does not send your details to anyone else. If we ever add an optional tool, it will stay off until you opt in, and you can change your mind at any time with the Cookie & privacy choices link at the bottom of every page.

We honour the Global Privacy Control signal your browser can send: it is treated as a request to keep every optional category off.

Information collected automatically

Like any website, our servers log your IP address, browser type, the pages or API endpoints requested, and the time. We use these first-party logs only to run, secure and troubleshoot the service. We do not combine them with advertising data and we do not share them for advertising.

How checks work

To check an address we connect to the mail server for its domain and ask whether the mailbox exists. No message is ever sent. The operator of that mail server can see a connection from our server and the address being checked.

Your lists: you decide, we process

For the lists you upload, you decide why and how they are used and we process them on your behalf, only to provide the service. You are responsible for having the right to submit them.

Who we share data with

Only the providers we need to run the service:

• Hetzner hosts our servers and database.
• Stripe processes payments.
• Amazon Web Services stores our encrypted nightly backups.
• Cloudflare provides our domain name service.

Some of these providers may process data outside your country. We do not sell or rent your data, and we share it with authorities only where the law requires.

How long we keep it

• Lists and results: deleted automatically 30 days after they finish processing, or sooner when you delete them from your history.
• Account and billing records: kept while your account exists and as long afterwards as the law requires for accounting.
• Backups: we keep encrypted nightly backups for safety. A list you delete can remain inside older backups until they expire, which takes up to about 13 months. Backups are encrypted and are used only to recover from a failure.

Security

Connections to the service are encrypted, passwords are stored hashed, access to the servers is restricted, and backups are encrypted. No system is perfectly secure, but we take reasonable steps to protect your data.

California residents

If you live in California you have the right to know what personal information we hold about you, to ask us to correct or delete it, and not to be treated differently for using these rights. We do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information to infer characteristics about you. For the lists you upload, we act as your service provider and process them only on your instructions. To make a request, use the contact details on this page.

Your rights

You can ask us to access, correct, export or delete your personal data, and to stop processing it. You can delete your lists yourself at any time. Where the law of your country gives you more rights, we respect them.

Changes

If we make a material change to this policy we will update the date above.