Privacy Policy
Last updated: 9 August 2026
This policy explains what information MailSurety ("we", "us") collects, why and your rights over it. We built MailSurety to reduce the amount of email data flying around — so we deliberately handle as little personal data as possible.
Who we are: MailSurety is operated by Emil Toshev, based in Bulgaria, who is the data controller for the information described here. For any privacy question — including a request to see, correct or delete your data — email privacy@mailsurety.com and you'll reach him directly. When MailSurety moves to its operating company, this page will name that company and its registered address.
The most important thing
Your real email never passes through us. We do not send, receive, store or read your actual messages or their contents. MailSurety works only with the aggregate authentication reports (DMARC "rua" reports) that mailbox providers such as Google, Microsoft and Yahoo already generate. These reports contain statistics — sending IP addresses, pass/fail counts and authentication results — not message content, subjects, attachments or recipients.
Information we collect
- Account details — your name, business name, email address and billing details when you become a customer.
- Domain & DNS data — the domains you ask us to monitor and their public DNS records.
- Aggregate DMARC reports — the XML reports mailbox providers send to the address on your DMARC record. These contain sending-server IP addresses and authentication results.
- Free checker — when you use the domain checker on our site, the lookup happens in your browser against public DNS. We do not store the domains you check.
- Basic site analytics — privacy-respecting, aggregate usage stats. We do not use advertising or cross-site tracking cookies.
Our role under data-protection law (UK & Switzerland)
For the DMARC report data we process on your behalf, you are the data controller and we act as your data processor. We process it only to provide the service, on your instructions. Business customers can request our Data Processing Agreement (DPA) at privacy@mailsurety.com. For Swiss customers we comply with the Swiss Federal Act on Data Protection (FADP); for Canadian customers, with PIPEDA.
How we use information
- To monitor your domain's authentication and alert you to problems and threats.
- To produce your reports and dashboard.
- To provide support, take payment and meet legal obligations.
We do not sell your data and we do not send you unsolicited marketing. Because anti-spam law in Canada (CASL) and Switzerland (UWG) is strict, we contact prospects by phone, letter or on request — not by cold email.
Where data is stored & how long
Data is stored on secure servers within the UK/EU. We keep aggregate report data for as long as your subscription is active plus a limited retention window for trend history, then delete it. You can ask us to delete your data at any time.
Sharing
We share data only with the processors needed to run the service (e.g. hosting and our payment provider, which acts as merchant of record for billing and tax). Each is bound by data-protection terms. We never sell data to third parties.
The domain checker on our website
Our free domain checker reads public DNS records — the same information anyone can look up with dig — and it runs in your browser, not on our servers. To do that it queries Google Public DNS, which means your IP address and the domain you checked are visible to Google for that lookup. Nothing else on this site contacts a third party: the fonts are served from our own domain and there are no trackers, analytics or advertising scripts. The scorecard we publish about our own domain is produced the same way and is cached in your browser for 30 minutes so it isn't re-fetched on every page.
If you just run a check, we don't record it. We never see the domain you checked and we don't need an account or an email address. The only thing that reaches us is a request to add 1 to a counter of how many checks have been run — a single number, with no domain, address or identifier attached, which is what lets us show a running total on the homepage.
If you ask us to email you the report, that's different and here is exactly what happens: we store the email address you typed and the domain you checked, re-run the check on our servers and send you the result once. We keep that record so we know what we sent you and can answer if you reply. It is a single email — you are not added to any mailing list and we won't email you again about it. Ask us at privacy@mailsurety.com and we'll delete it.
Cookies
We use only strictly necessary cookies and similar storage — the ones that keep you signed in and keep the service secure (set by our authentication and payment providers). We do not use advertising, marketing or cross-site tracking cookies, so no cookie-consent banner is required. Because these cookies are essential to sign in and use your dashboard, blocking them may stop parts of the site from working. You can clear cookies at any time in your browser settings.
Your rights
You can access, correct, export or delete your personal data and object to or restrict its processing. Email privacy@mailsurety.com and we'll respond within the timescales the law requires. UK residents may complain to the ICO and Swiss residents to the Federal Data Protection and Information Commissioner (FDPIC).
Changes
We'll post any changes here and update the date above. Material changes will be notified to customers by email.