Privacy
Updated 2026-09-08
This page describes exactly what happens to information you give us and what we read about your domain. It is written from the code rather than from a template, so every statement here can be checked against what the product actually does.
What we read about your domain
Public DNS records only: your MX, SPF, DKIM, DMARC, BIMI, MTA-STS and TLS reporting records, plus public blocklist queries against the addresses those records point to. We request no access to your systems, install nothing, and read nothing that is not already published for any mail provider to see. The report shows you the exact query behind every finding.
What you give us
Your first name, last name, work email, role, the domain you asked us to audit, and optionally the approximate size of your list. The list size is used only to scale a clearly labelled estimate, and the report omits that estimate entirely when you do not provide one.
What we do with it
We store your details so we can run your audit and follow up, and we store the audit result so we can show you what changed if you audit again. Your score is shown on screen at no charge. If you buy the full report you download it immediately and we also email you a copy of the link. We add your address to the Donor Insights newsletter only if you tick the box asking for it, which is unticked by default.
The newsletter, plainly
The Donor Insights newsletter is optional and the box asking for it starts unticked, so running an audit does not put you on a list. If you do tick it: it is marketing email from Donor Insights, a Pray.com company, it arrives most mornings, and every message carries an unsubscribe link that works. Leaving the list does not affect your report or your access to it.
Paying for a report
Payment is handled entirely by Stripe on a page Stripe hosts. Your card number never reaches this site and we never see it. What comes back to us is the fact that a payment succeeded, the address you gave Stripe, and the identifiers we need to find your purchase if you ask for a refund.
Who else sees it
SendGrid delivers the email and holds the newsletter list. Vercel hosts the site and stores the records. Stripe processes payment and holds the card details we never receive. Nobody else receives your details, and we do not sell or share them.
Advertising, and what Meta receives
This site runs the Meta advertising pixel, and it loads with the page. It sets cookies in your browser and reports three things to Meta: that this page was opened, that an audit was run, and that a report was bought. We send Meta those same three events from our servers as well, because browser-based tracking is blocked often enough that we would otherwise be guessing at what our advertising is doing.
Exactly what goes to Meta
Your email address, first name and last name, each hashed with SHA-256 before it leaves us, which lets Meta match you to an account it already holds without us handing over the details themselves. Alongside that: your IP address, your browser's user agent, Meta's own cookies if you have them, your role, the size band you selected, and the amount of any purchase. We do NOT send your domain, your score, or anything from your findings.
Turning it off
Any browser with tracking protection, or any of the common blocker extensions, stops the pixel. Doing so does not affect your audit, your report, or anything you have paid for. What Meta does with what it has already received is governed by your Meta account settings rather than by us.
Report links
A report link does not identify who requested it, so a link forwarded to your board shows the report and not your address.
Report links
A report link is signed and read only. It grants access to that one report and nothing else, it cannot be used to run an audit or reach another report, and it stops working after ninety days.
Getting your data removed
Reply to any message we send you and ask. We will delete your record and take you off the list.
This notice is a factual description of the product's behaviour and has not yet been through legal review.