Privacy

Last updated 15 November 2026

Domalyt checks public information about domains. We collect as little about you as we can, and we never sell it.

What we store

• Free scans: the domain, the result and the requesting IP address (to prevent abuse), for 90 days. Anyone with the report link can view the report.
• Accounts: your name, email address, a scrambled (hashed) password, the domains you save, their scan history and alerts. Scan history is kept for 12 months.
• DMARC reports: the summary reports mail providers send contain sending IP addresses and message counts, never message content. We keep them for 12 months.
• Payments: handled by Dodo Payments. We never see or store your card number; we keep only your plan and billing status.
• Cookies: one sign-in cookie and one for your light/dark preference. No advertising or tracking cookies.

Who processes it for us

Hetzner (hosting, EU), Resend (sending email), Dodo Payments (billing, merchant of record) and Cloudflare (routing DMARC report email).

Your choices

You can ask for a copy of your data or have your account deleted at any time. Deleting your account removes your domains, scans and alerts. Reply to any email from us to reach a person.