privacy

No trackers and no analytics. The only cookie is the one that keeps you signed in, set when you open a sign-in link. Every page is one file, and loads nothing from any other site. The server doesn't log visits. The light/dark choice is kept in your browser and never sent to the server.

when you grade a domain

• The report is saved. For a day after it's graded, anyone can open it at gradedns.com/d/<domain>. Reports from free grades are deleted within 3 days.
• To hold the free limit of 10 a day, your IP address is counted (for IPv6, its /64 network). The count isn't linked to the domains you grade, and it's deleted within 3 days.
• Grading means looking the domain up in public DNS and with its registry, connecting to its web and mail servers, and looking its addresses up on spam blocklists such as SpamCop and Barracuda. Those see the domain and its servers. They don't see you.

when you watch a domain

• Stripe takes the payment through Link, its merchant of record, so the card never reaches this site. We keep the email address and customer number Stripe sends, the domains you watch and whether your subscription is active. We also keep what you choose on your account page: which alerts each domain emails, and another address for alerts if you set one.
• Signing in is a link we email you, to any address. It works for 24 hours and isn't stored. Opening it keeps that browser signed in, with a cookie holding a random id that we keep only as a hash, next to your address and when it was last used. It lasts until you sign out, or 90 days unused. An address that signs in but never watches anything leaves nothing else behind.
• Each watched domain is graded every day, and those reports are kept for 60 days. Changes to its DNS, email records and where its website lands are kept as its history, with no end date. The history shows on the domain's public report, with report mailboxes hidden, and stays there after you cancel.
• DMARC reports: when a watched domain's DMARC record sends its reports to your account's address, we keep what they say for 90 days: each day's totals for every server that sent mail as the domain, and whether its mail passed. The report emails are deleted once read; one that can't be read is kept a week. We name each server from its reverse DNS or Team Cymru's public registry of networks, and look up the ones sending your mail on public blocklists. Only your account sees them.
• Your MCP key is stored only as a hash, so not even this site can read it back.
• We email you a welcome with your links, an alert when a watched domain gets worse or changes, a monthly report card, and new links when you ask for them. They go out through the email service that sends our mail. Every alert and report card has a one-click unsubscribe, and another address you choose for them is asked to confirm before it gets any.
• Cancel any time from the billing link in any of those emails. The daily checks stop when the paid month ends. Your account page downloads your domains, grades and history as CSV, and deletes the account and its data, that history included; or email support@gradedns.com.

where it's kept

• On one server in Toronto, Canada. Nightly backups, and any encrypted copy of them kept off the server, are kept for up to 14 days, so anything deleted is gone from them within 14 days too.
• Stripe, our email service and any off-server backup copy may hold your email address, payment and the domains you watch outside Canada, including in the United States.
• Pages reach you, and DMARC report emails reach us, through Cloudflare, which shields the server from attacks. Like any network in between, it handles your IP address and the pages you open.
• Mail you send to an @gradedns.com address passes through Cloudflare to our inbox, which may be outside Canada, and is kept there until we delete it.
• Nothing is sold or shared with anyone else.

questions

Email support@gradedns.com. When what this site keeps changes, this page changes with it, and so does the date at the top.