Privacy Policy

Effective October 30, 2026

DMARC Analyzer ("the app", "we", "us") helps you read DMARC aggregate reports and get recommendations for improving email deliverability. This policy explains what information the app accesses, how it is used, and the choices you have.

Summary

The app runs entirely in your web browser. We do not operate a server that receives, stores, or processes your reports or email data.
Report files you upload and report emails you import from Gmail are processed in your browser's memory and discarded when you close or reload the page.
We do not sell, share, or use your data for advertising, and we do not use cookies or analytics.

Information the app processes

Report files you upload

When you choose or drop files, the app reads them in your browser to extract DMARC aggregate reports. These reports typically contain your domain name, the names of organizations that sent the reports, IP addresses of servers that sent mail using your domain, message counts, and SPF and DKIM authentication results. The files are never transmitted to us or any third party.

Gmail data (optional)

If you choose Connect Gmail, the app asks Google for read-only access to your Gmail account using the https://www.googleapis.com/auth/gmail.readonly scope. With your permission, the app:

searches your mailbox using the search query shown in the app (by default, messages with attachments from the DMARC report senders configured for the app, or whose subject mentions a DMARC report, within the date range you select);
reads the matching messages to find their attachments; and
downloads .xml, .gz, and .zip attachments and extracts DMARC reports from them.

The app does not read, display, or analyze the body text of your messages, and it does not send, modify, delete, or label any email. All requests go directly from your browser to Google. Nothing is sent to us.

How Google user data is used

Data obtained from Gmail is used only to show you the DMARC analysis you requested in the app. It is not used for any other purpose, not transferred to anyone, not used for advertising, and not used to develop, improve, or train generalized AI or machine-learning models. No person reads your data.

DMARC Analyzer's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and retention

The app does not store your reports, email data, or Google access token on any server or in your browser's persistent storage. The Google access token is held in memory for your current session and expires automatically after about an hour. All data is cleared when you close or reload the page, select Clear, or select Disconnect.

Revoking access

You can remove the app's access to your Google account at any time from your Google Account permissions page.

Third-party services

Google. When you connect Gmail, the app loads Google's sign-in script from accounts.google.com and calls the Gmail API. Google processes those requests under the Google Privacy Policy and may set its own cookies on Google domains.
Hosting. Like any website, the service that hosts this app may automatically log standard request information such as your IP address, browser type, and the pages requested. These logs do not include your reports or email data.

Cookies and tracking

The app does not set cookies and does not use analytics, advertising, or tracking technologies.

Security

Because your data is processed locally in your browser and transmitted only between your browser and Google over encrypted HTTPS connections, it is never exposed to our systems. No method of transmission or storage is completely secure, but limiting where data goes is the most effective protection we can offer.

Children's privacy

The app is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with a new effective date. If we change how the app uses Google user data, we will ask for your consent before doing so.

Contact

Questions about this policy can be sent to privacy@example.com.