Privacy notice
What this site collects, where it goes, and how to reach us about it. This describes what the site actually does today, not what we intend to build.
Who runs this
This site is published by Cakemail. For a question about this notice, or about data we hold about you, write to privacy@cakemail.com.
What we collect, and where it goes
What is collected depends on which part of the site you use. Each one is described below; nothing else on the site collects anything.
The domain health check and the bulk-sender check read public DNS records for the domain you enter, and query the operators of the blocklists we check it against. We log one line per check with a day-salted hash of the domain — never the domain itself, and nothing that identifies you.
The header analyzer runs entirely in your browser. What you paste is not sent to our server, not stored, and not added to analytics.
Requesting an audit or a service sends your name and email address, and whatever you choose to add — company, message, sending domain, the currency shown — to HubSpot (portal 145153050, on HubSpot's EU infrastructure), so we can answer your request. HubSpot publishes that some data about how its service is used is transferred to the United States.
Domain and bulk-sender checks are limited by IP address: 10 per 60 seconds. The count is kept in memory only, for the length of that window, and nothing is kept after it.
Analytics
We use PostHog, cookieless, with in-memory persistence: nothing about your visit survives closing the tab. Your browser sends analytics events to this site's own address, which relays them on to PostHog — only the content type and your browser's user-agent travel with that relay, never a cookie, an authorization header, or the page you were on. Your IP address is included so PostHog can compute a cookieless visitor identifier; PostHog discards it once that identifier is computed.
What's stored in your browser
No cookies; we store your language and currency choices on your device.
- The currency you picked for a price on this site, in your browser's local storage. It stays until you clear it; nothing about it is sent to us.
- The language you chose, in your browser's local storage, the same way.
- A marker, in your browser's session storage, that stops the automatic language redirect from looping. It clears when you close the tab.
Where this is processed
Requests to this site are processed in the United States, on Vercel's infrastructure. A request that reaches HubSpot is then held on HubSpot's EU infrastructure, as described above.
Vercel is certified under the EU-US Data Privacy Framework, and its UK and Swiss extensions; its data processing agreement also relies on the 2021 EU Standard Contractual Clauses.
HubSpot is certified under the same framework.
For a reader in Québec, this means your personal information may be communicated outside Québec.
How long we keep it
We keep your address until you ask us to delete it, or until the purpose you gave it for no longer exists — whichever comes first. We review these records at least once a year and delete what we no longer have a purpose for. To ask for deletion, write to privacy@cakemail.com.
Vercel's own runtime logs, which record requests to this site, are kept for about a day; the fields exposed to us carry no IP address and no user agent. What Vercel itself retains beyond that is described in Vercel's own privacy policy.
Your rights
You can ask to see, correct or delete what we hold about you, or ask a question about this notice, by writing to privacy@cakemail.com. We will act within the time the law allows.