Privacy Policy for DMARC GUY
Last Updated: September 10, 2026
DMARC GUY is operated by Solutions LastSpam Inc. ("we", "us", "our"), Saint-Eustache, Québec J7R 6J9, Canada.
This policy explains what personal information we collect through dmarcguy.com and our tools, why we collect it, who it is shared with, and what you can ask us to do about it. It is written to meet Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's PIPEDA.
1. Person responsible for the protection of personal information
Under Law 25 we are required to designate someone and publish their contact information.
- Jean-François Bourdeau, Chief Executive Officer, Solutions LastSpam Inc.
- [email protected]
- Saint-Eustache, Québec J7R 6J9, Canada
Write to that address for any question, access request, correction, deletion, or complaint about this policy.
2. What each tool actually collects
We describe this tool by tool, because the answer genuinely differs.
Domain checker (DMARC / SPF / DKIM lookup). You enter a domain name; we query public DNS and show you the result. We do not store the domain you looked up, and we do not store anything identifying you. Nothing about that lookup is written to our database.
Email tester. You send a message to a test address and we analyse its headers to show how it authenticated. The analysis itself is transient. If you use the "email me this report" option, we store your email address, your IP address, the sending domain, and the resulting grade and scores, so that we can send the report and keep a record of what was sent.
Email Source Map. If you request a summary by email, we store your email address, your IP address, the map identifier, and counts of sources and failures.
Blog subscription. If you subscribe, we store your email address, your IP address, your language preference, and a confirmation token. Every message includes an unsubscribe link.
Sharing an article by email. We record the requesting IP address for rate-limiting purposes.
AI assistant. Some pages offer a plain-language explanation of your results. When you use it, your question and the technical results are sent to xAI Corp. (api.x.ai) for processing. Do not paste confidential information into it.
Server and hosting logs. Our host records standard request data, including IP addresses, for security and abuse prevention.
Paid products. Payments are processed by Stripe. We never see or store your card number.
We do not use advertising cookies and we do not run third-party behavioural tracking.
3. Why we collect it
To operate the tools you asked for, deliver the reports and emails you requested, prevent abuse and rate-limit our services, meet our legal and accounting obligations, and — only where you have opted in — send you the blog newsletter.
4. Who we share it with
We do not sell, rent or trade personal information, and we do not share it for anyone else's marketing.
We use the following service providers, which process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, database (D1) | Global |
| Twilio SendGrid | Sending the emails you request | United States |
| xAI Corp. | AI-generated explanations of your results | United States |
| Stripe, Inc. | Payment processing | United States |
This means some personal information is processed outside Québec and Canada, principally in the United States, where it may be subject to access under local law. We rely on contractual protections with each provider. If you would rather not have your information leave the country, do not use the AI assistant or the email-report features — the domain checker stores nothing at all.
We may also disclose information where the law requires it, such as in response to a subpoena or court order.
5. How long we keep it
- Blog subscribers: until you unsubscribe or ask us to delete you.
- Email report, Source Map and share logs: up to 24 months, then deleted.
- Payment and accounting records: as long as tax law requires.
- Domain checker lookups: not retained.
6. Security
Data is stored on Cloudflare infrastructure and transmitted over TLS. Administrative access is restricted and authenticated. No system is perfectly secure, but we limit collection deliberately — the less we hold, the less there is to lose.
7. Confidentiality incidents
If we become aware of a confidentiality incident presenting a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and the affected individuals promptly, as Law 25 requires, and keep a register of incidents.
8. Your rights
You may ask us to:
- confirm whether we hold personal information about you, and give you a copy;
- correct information that is inaccurate or incomplete;
- delete information, or withdraw consent, where the law allows;
- receive computerised information you gave us in a structured, commonly used format (portability);
- explain any decision made about you using automated processing.
Write to [email protected]. We answer within 30 days. If you are not satisfied with our response, you may complain to the Commission d'accès à l'information du Québec or to the Office of the Privacy Commissioner of Canada.
9. Children
Our Services are intended for adults administering email domains. We do not knowingly collect personal information from children.
10. Links to other sites
Our site links to third-party sites we do not control. This policy does not apply to them.
11. Changes to this policy
We may update this policy. Material changes will be posted here with a new "Last Updated" date, and where required by law we will notify you directly.
12. Contact
- Email: [email protected]
- General support: [email protected]
- Solutions LastSpam Inc., Saint-Eustache, Québec J7R 6J9, Canada