Privacy policy

Who is responsible for your data

This policy is published by the administrator of the blacklistmonitoring.com service ("we", "us"). You can reach us about anything in this policy at [email protected].

What we collect

• Account data. Your email address, a hashed password, your workspace name and the settings you choose.
• Monitoring data. The domains, IP addresses and ranges you add, the results of our DNS checks, alert settings and the addresses of channels such as Slack or webhook URLs.
• DMARC reports. Aggregate reports sent by mailbox providers to the reporting address of your workspace. They contain sending IP addresses, message counts and authentication results, not message content.
• Reputation data. If you connect a mailbox provider reputation source, we read the domain and IP reputation and spam rate data it exposes, with read-only access.
• Inbox placement tests. The test messages you send to our seed mailboxes and where they landed.
• Free check. The domain or IP you type, the result, and a one-way hash of your IP address, kept to allow one free check per visitor.
• Billing data. Plan, invoices and payment status. Card details are entered on the payment operator's page and never reach our servers.
• Technical logs. IP address, browser and request logs used for security and troubleshooting, kept for up to 30 days.

Why we use it

To run the service you signed up for (contract), to keep it secure and prevent abuse (legitimate interest), to send account and alert emails you asked for (contract), and to meet tax and accounting duties for paid plans (legal obligation). We do not sell personal data. To measure our own ads (legitimate interest) we record which ad or campaign brought a visit, as described under Advertising measurement below.

Who receives it

We share data only with service providers that help us run the service, under contracts that limit their use of it: a hosting provider in the European Union, a payment operator, an email delivery provider for account and alert emails, the messaging tools you connect yourself (for example your Slack workspace or webhook endpoint) and Microsoft Advertising for measuring our ads (see below). We do not use analytics trackers.

Cookies

The service needs a session cookie, a security token that protects forms, and a cookie that remembers that you are signed in. A first-party cookie named bm_acq (90 days) remembers the ad click identifier (gclid, gbraid, wbraid, msclkid) and the UTM parameters of your visit; when you sign up it is copied to your account so we can tell which campaigns bring paying customers. It is set only when you arrive from a link that carries these parameters.

Advertising measurement

Public pages and your account area load the Microsoft Advertising Universal Event Tracking tag (bat.js). It reports page views, a confirmed sign-up and a first subscription payment with its amount to Microsoft Advertising, so we can measure our ads. We do not send the domains or IP addresses you monitor, your check results, your DMARC reports or your email address to any advertising network. You can block these requests with your browser's tracking protection without losing any feature of BlacklistMonitoring.

How long we keep it

Monitoring history is kept for the history period of your plan. When you delete a domain, its history is deleted. When you delete your account, your data is deleted within 30 days, except invoices that the law requires us to keep.

Your rights

You can access, correct, export or delete your data, object to processing or ask us to restrict it. Most of this is available in your account settings. For anything else write to [email protected]. If you are in the EU or UK you can also complain to your local data protection authority.

International transfers

Some providers may process data outside your country. Where that happens we rely on standard contractual clauses or an equivalent safeguard.

Changes

We will post any change on this page and, for material changes, email account owners before it takes effect.