Privacy Policy

Last Updated: October 5, 2026 • Architectural Privacy Standard

Privacy by Architecture, Not Just by Policy: DMARCPro is engineered as a serverless, client-side web utility. Your domain names, email addresses, and DNS records never pass through or touch an application database.

1. Information We Do Not Collect

Unlike conventional SaaS audit tools that require account creation and ingest company domains into internal databases, DMARCPro enforces a strict Zero Data Retention architecture:

No User Accounts: No signups, passwords, or personal credentials are required or stored.
No Domain Logs: We do not log, catalog, or sell the domain names you test or configure.
No Email Ingestion: Email addresses entered for DMARC reporting ("rua" or "ruf" tags) remain solely in your local browser memory.

2. Client-Side Execution

All record assembly, syntax validation (RFC 9989, RFC 7489, RFC 7208), SPF mechanism concatenation, and nested lookup calculations are performed entirely in your browser's local JavaScript execution context.

3. Direct DNS-over-HTTPS (DoH) Lookups

When you use the DMARC & SPF Inspector tool, your browser sends encrypted DNS queries directly from your client machine to public, audited DNS-over-HTTPS resolvers:

Primary Resolver: Cloudflare DNS over HTTPS (cloudflare-dns.com)
Fallback Resolver: Google Public DNS over HTTPS (dns.google)

These queries do not pass through any DMARCPro proxy server. The transmission and resolution of these public DNS queries are governed by the respective privacy policies of Cloudflare and Google.

4. Cookies and Local Storage

DMARCPro does not use persistent tracking cookies, advertising identifiers, or session tokens. Transient application states (such as active UI tab selection or merged record drafts) exist exclusively in temporary browser memory and are discarded when you close or refresh the page.

5. External Links and Third-Party Services

Our documentation and affiliate recommendations link to third-party services (such as domain registrars, ESPs, and cold outreach software). When you navigate to an external link, your interactions are governed by the privacy policy of that destination website. We recommend reviewing their privacy statements before submitting any personal information.

6. Changes to this Privacy Policy

We may revise this Privacy Policy periodically to reflect technological advancements or DNS standard updates. Any changes will be published here with an updated revision date.

7. Contact Us

For questions regarding this Privacy Policy or our client-side architecture, contact us through our parent application at postsyncapp.com.