Skip to content
healthcheck.email Sign in

Privacy

healthcheck.email is in an invite-only preview. A full privacy policy will be published here before it opens to the public. What we keep includes:

  • The email address you sign in with.
  • Email addresses shown on your domain's public website (home, contact and about pages, and security.txt), and which page each was on. We read only those pages, and we honour robots.txt.
  • Cases you open: your answers, notes, any message headers you add (never the message body), and any bounce messages you add, which can quote the message they bounced. These are deleted 90 days after a case is resolved.
  • Messages sent or forwarded to a domain's intake address: kept for 30 days, then deleted except for the sender, the intake address, the subject, the message ID and when it arrived, plus its score and the reasons for it. Headers you choose to save from Check a message's headers are kept the same way.
  • If you turn on DMARC reports, receivers such as Gmail send us daily summaries for that domain: sending servers' addresses and message counts, never message content. We keep the files for 30 days and the summaries for 13 months. We don't accept failure reports that include messages.
  • Your domain's icon. About once a month we read your domain's home page and its icon to show it in your domain lists.
  • If you turn on the weekly digest, we email you a summary on Monday mornings and keep a record of each send. We store your time zone to time it.
  • The display name you choose and the pictures you or your workspace's admins upload. We re-encode pictures, which drops location and camera details.
  • The workspaces you create and the people you invite to them.
  • The domains you add, the mail services you name for them, and the results of checking them. Those results come from public DNS and registration records.
  • Feedback you send us about a report, and requests to join the preview.
  • Sign-in sessions, alerts we send, and the share links you create.

Message headers you paste into Check a message's headers are read to show you the results and are not saved or logged. If the headers include DKIM signatures, we look up the signing keys in public DNS.

Some features use an AI model to write and answer. Report summaries send it the report for that check. Sender suggestions send it the hostnames of senders we don't recognize. Questions you ask send it the question and that report. We keep the questions you ask and their answers. People in your workspace can see them, and so can we, to improve our answers. Whoever asked, or a workspace admin, can delete one.