Privacy policy

Who controls your data

Silk Creative Labs LLC, a California limited liability company, is the data controller for SenderCheckand for the personal data described below. SenderCheck is a brand of Silk Creative Labs LLC, not a separate company. Our mailing address is 2108 N St #14571, Sacramento, CA 95816, and you can reach us at support@sendercheck.net. Where this policy says “we”, it means Silk Creative Labs LLC.

What we collect

When you run a check without an account

• The domain you entered, and the DNS records returned for it, all of which are public
• A keyed hash of your IP address, used for rate limiting. The address itself is never stored, and the hash cannot be reversed to recover it
• An anonymous session identifier and the page you were on, for conversion analytics

When you have an account

• Your email address
• The domains you monitor and their check history
• Notification preferences
• Subscription status and a Stripe customer identifier. Card details are handled entirely by Stripe and never reach our servers

What we do not collect

• The contents of any email
• Credentials for your DNS host, mail provider or anything else
• Browser fingerprints or cross-site tracking identifiers
• Raw IP addresses

Why we collect it

To run the checks you ask for, send the alerts you subscribe to, enforce plan limits, prevent abuse, bill you, and understand which parts of the product are useful. The lawful basis is performance of the contract for account data, and legitimate interests for abuse prevention and product analytics.

How long we keep it

• Anonymous check results: 30 days, then deleted automatically
• Account check history: the retention window on your plan, which is 7 days on Free and 90 days to 2 years on paid plans
• History when a paid plan ends: kept on that plan’s window for 30 days after the plan ends, then on the window of the plan you are on. Moving to a smaller plan does not end a plan, so the smaller plan’s window applies from the next nightly clean-up
• Rate limiting hashes: 2 days
• Delivered alerts: 180 days
• Usage and billing records: up to 400 days, as required for accounting
• Account data: until you delete your account

These are enforced by a scheduled job, not by policy alone.

Who we share it with

We use a small number of processors, and no others:

• Supabase: database and authentication
• Vercel: application hosting
• Stripe: payments
• Resend: transactional email
• Sentry: error monitoring for our servers. Error reports are sent without request bodies, headers or cookies

We do not sell personal data and do not share it for advertising. Any aggregate statistics we publish are derived only where the sample is large enough that no individual domain or customer is identifiable.

Your rights

You may access, correct, export or delete your data. Deletion is self-service in your account settings and removes your profile, domains and monitoring history. Anonymous analytics rows are retained but detached from your account, since they contain no personal data once unlinked. For anything else, email privacy@sendercheck.net.

Cookies

We set a session cookie when you sign in, and a first-party analytics identifier that distinguishes visits without identifying you. There are no third-party advertising or tracking cookies, which is why there is no consent banner to click through.

Security

Data is encrypted in transit and at rest. Tenant isolation is enforced by row-level security in the database rather than by application code alone, so a bug in a route handler cannot expose another account’s data.

Contact

Privacy requests go to privacy@sendercheck.net, or by post to Silk Creative Labs LLC, 2108 N St #14571, Sacramento, CA 95816. We answer data requests within 30 days.