Privacy Policy

Last updated: November 9, 2026

The data controller is Andriichuk OÜ, Estonia, which operates MXDeck. Contact: hello@mxdeck.com.

The free checker

The checker reads public DNS records of the domains you enter and connects to their mail servers on port 25 to read the TLS certificate. Results are kept in memory for one hour so repeat checks are fast, then dropped. We do not store your domain list unless you subscribe to weekly monitoring. To enforce the limit of 10 runs per hour we keep your IP address in memory for one hour.

Waitlist, CSV report and monitoring

When you join the waitlist, download a CSV report or subscribe to monitoring, we store: your email address, your answers (number of domains, mail host, what annoys you about email), the page and campaign tags you came from, and, for monitoring only, the domains you asked us to watch with their last grade. We send a confirmation email first (double opt-in).

We use this to email you when the beta opens, to send monitoring alerts, and to decide what to build. Legal basis: your consent (GDPR art. 6(1)(a)), which you can withdraw at any time.

The MXDeck Chrome extension

The extension keeps your domain list, DKIM selector and the last results in your browser’s local storage. Once a day, and when you press Check now, it sends the domain list to api.mxdeck.com to run the same checks as the website; the server does not store the list. It sends anonymous usage events to Google Analytics (for example “check ran, 12 domains, worst grade C”) with a random install ID, never your domains, URLs or email. Removing the extension deletes everything it stored.

Retention

Waitlist data is kept until the app launches plus 12 months, or until you ask us to delete it. Watched domains are deleted as soon as you click unsubscribe in any alert. Unconfirmed signups are deleted after 30 days.

Analytics

We use Google Analytics to count visits and checker runs. In the EU, EEA, UK and Switzerland analytics cookies are set only after you accept them in the banner.

Processors

The website is served by Cloudflare. The checker, the waitlist database and our mail server run on our own server at Hetzner in Germany. Pre-orders, if you make one, are processed by Stripe under its own privacy policy; we never see your card number.

The Mac app

When the app ships, your mail and passwords stay on your Mac (passwords in the macOS Keychain). There is no MXDeck account and no cloud copy of your inbox.

Your rights

You can ask to see, correct or delete your data at any time by writing to hello@mxdeck.com. We delete on request within 30 days. You can also complain to your data protection authority; in Estonia that is the Andmekaitse Inspektsioon.