Privacy Policy

Last updated: October 26, 2026 (analytics, monitoring and outreach added)

The free scan

When you run the scan, the domain you enter is sent to our server (hosted on Vercel), which looks up its public DNS records through public resolvers (Cloudflare and Google DNS-over-HTTPS, with public DNS servers as a fallback). Results are kept in server memory for up to 5 minutes to reduce repeated lookups and are not linked to your identity. The scan does not ask for your email address. If you give us your email (for example by replying to us or asking us to send you your results), we use it only to reply and to send what you asked for, and we do not add you to a marketing list. Your IP address is held briefly in memory for rate limiting and is not written to our logs; our hosting provider may keep standard access logs under its own policy.

What we collect when you order

Checkout is handled by Stripe. Stripe collects your name, email address, billing address and card or other payment details, and processes them under its own privacy policy. We never see or store full card numbers. Stripe shares with us your name, email, billing address, the amount paid, and the domain(s) you enter at checkout. After you order we may also receive anything you choose to send us, such as answers to our intake questions, email headers or replies to our emails.

Who processes your information

• Stripe: payments, subscriptions, receipts and order records.
• Vercel: hosts this website and the scan and order-notification functions; keeps standard request logs; provides cookieless Web Analytics and the storage used for Trust Monitor.
• BigScoots: hosts our email. When you order, our server sends an order notice to our own inbox and a confirmation to the email you gave Stripe, through our BigScoots mail server.

Partner outreach

We occasionally email businesses such as web designers, IT providers and agencies, at business contact addresses they publish on their own websites, to invite them to our partner program. We do this on the basis of our legitimate interest in business-to-business partnerships, keep only their business name, website, published address and a log of what we sent, send at most one follow-up, and stop immediately if they reply "no thanks" or ask us to stop. To opt out or have that record deleted, reply to the email or write to partners@exclusivetrust.com.

How we use it

Only to deliver and support the service you ordered, to send service messages, and to keep basic business records. We do not sell your information or use it for advertising.

Trust Monitor

If you subscribe to Trust Monitor, we store your subscription ID, name, email, plan, the domains you asked us to monitor, and the latest public DNS records we found for them (in Vercel Blob storage) so we can detect changes. We use this only to run the checks and email you alerts and monthly summaries. When you cancel, checks stop; we delete these records within 90 days unless we need them for accounting.

Intake answers and automated reports

Your intake answers (email provider, sending services, DNS host and any message headers you paste) are used once to generate your report, which we email to you. We do not keep a database of answers. The personal links in our emails carry your order reference, domain, email address and your provider and service choices, signed so they cannot be altered, so that the report and re-check pages work without storing data. Pasted headers are not stored or included in links. Reports are generated automatically by our software.

Cookies, referrals and analytics

We use Vercel Web Analytics to count page views and see which pages and referring sites bring visitors. It sets no cookies, does not track you across sites, and identifies visits only through a short-lived anonymised hash that Vercel discards within a day; we see aggregate numbers, not individuals. This site sets no cookies of its own. If you arrive through an approved partner's link (a ?ref= code), your browser stores that partner code locally (localStorage, key et_ref) for up to 60 days, and it is passed to Stripe as the order's reference so we can credit the partner. It contains only the partner's code, nothing about you, and is not shared with the partner beyond the fact that an order was made. You can clear it by clearing this site's data in your browser. Stripe's checkout pages, which are on stripe.com, use their own cookies for payment and fraud prevention.

Retention

We keep order records as long as needed for the service and for tax and accounting obligations, then delete them. You can ask us to delete your data at any time, subject to those obligations.

Your rights and contact

To access, correct, or delete your information, email hello@exclusivetrust.com.