Privacy policy

Last updated: 1 November 2026

Controller

Michael Papst, Viktor-Franz-Straße 24, 8051 Graz, Austria, sales@mxcheck.cc.

What you enter into the tools

Domains, IP addresses and links you check are processed to run the check (DNS queries, a short SMTP connection to the domain's mail servers, or loading the link on our server). Results are shown to you and not stored, except for a short-lived cache. Legal basis: performance of the service you request (Art. 6 (1) (b) GDPR).

Email spam test

A message you send to your test address is received by our mail server, scanned by our spam filter and analyzed. The message and its result are stored for 7 days so that you can open the result again, then deleted automatically. Only whoever has the (random, unguessable) result link can see it. Do not send messages containing other people's personal data you are not allowed to share. Legal basis: Art. 6 (1) (b) GDPR.

DMARC report analyzer and generators

DMARC report files are unpacked and analyzed in your browser and are not uploaded. Only if you click "Identify senders" are the source IP addresses sent to us for reverse-DNS and network lookups. DKIM keys are generated in your browser and never transmitted.

Free checks and fair use

To count the 5 free checks per day we store, per day, a counter linked to a random visitor ID (cookie mxv) and to a keyed hash (HMAC) of your IP address — never the IP address itself. Counters are deleted after 30 days. Legal basis: our legitimate interest in preventing abuse of the free service (Art. 6 (1) (f) GDPR).

Payments and credits

Payments are processed by Stripe (Stripe Payments Europe Ltd., Dublin, Ireland, and for Managed Payments its affiliates acting as merchant of record). Stripe receives your payment details and e-mail address directly; we store the payment reference, the pack, the amount and the e-mail address Stripe returns, to provide your credits, to let you restore them by e-mail and for accounting (Art. 6 (1) (b) and (c) GDPR). Stripe's privacy policy: stripe.com/privacy.

Cookies

mxcheck.cc uses no advertising or analytics cookies, only technically necessary cookies, which do not require consent (§ 165 (3) TKG 2021, Art. 5 (3) ePrivacy Directive):

mxv (cookie, HttpOnly)

Random visitor ID used to count your free checks and to show you your own spam-test results. Expires after 1 year.

mxw (cookie, HttpOnly)

Links your browser to your purchased credits. Set only after a purchase or restore. Expires after 2 years.

The payment page is operated by Stripe on its own domain (checkout.stripe.com), where Stripe sets cookies for fraud prevention under its own policy.

Server logs

The web server keeps standard access logs (IP address, time, requested page) for up to 14 days for security purposes (Art. 6 (1) (f) GDPR).

Hosting

The service runs on our own server in a data centre of Hetzner Online GmbH in the European Union.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority (in Austria: Datenschutzbehörde, dsb.gv.at). Write to sales@mxcheck.cc.