Privacy Policy

Last updated: October 19, 2026.

This policy explains how IronDome handles information when you visit our website, use an account or submit email addresses to our API. For privacy questions or requests, email contact@irondome.dev.

Email addresses checked through the API

Email checks are stateless for submitted addresses. We process an address in memory to return its classification. We do not retain submitted email addresses in our application databases, request logs or usage records, or add them to our detection lists because you checked them. Bulk checks follow the same approach.

We record usage information to operate the service, apply quotas and calculate bills. This includes account and key identifiers, timestamps, check counts, service information, provider categories and classification reasons. These records do not contain the submitted address or its raw domain.

This applies to addresses submitted for checking. Your own account email and billing contact email are stored separately so we can provide your account and send necessary messages.

Account and security information

When you create an account, we store your name, email address, verification status, authentication information, account settings and API-key records. If you use Google sign-in, we receive account information such as your name, email address and profile image from Google.

We use this information to authenticate you, manage access, protect accounts and send verification codes, password-reset messages and service notices. Sessions and security records can include IP addresses, browser information and sign-in activity. Essential cookies keep you signed in; these are separate from optional analytics cookies.

Billing and support

If you enable paid access, we store the billing details you provide, such as your billing name and email, business name, address and tax information, together with usage statements, payment references and payment status.

Payments are handled by Dodo Payments. Payment-card details are entered with the payment provider; IronDome does not store full card numbers or card security codes. Dodo Payments handles payment information under its own privacy policy.

If you contact us, we retain the information you send and our replies to resolve your request. Please do not send passwords, full API keys or unnecessary personal data in support messages.

Website analytics and cookies

The free disposable email checker uses an essential, signed cookie to allow three checks per browser per UTC day. We store a random daily identifier and a check count for this limit, not your IP address or submitted email address. Clearing cookies resets this browser allowance. These records expire daily and are removed during routine cleanup.

We use Google Analytics on the public website only when you allow analytics cookies. Declining does not affect access to the website or API. We do not run this website analytics integration in the dashboard or on API requests.

Analytics can record pages visited, signup-link clicks, and browser and device information. We omit URL query strings and fragments and send only the origin of referring pages. We do not send form contents, email addresses, passwords, verification codes or API keys to Google Analytics. Advertising storage, ad personalization and Google signals are disabled.

Your cookie choice is saved in your browser. Use Cookie settings to change it. Declining stops future collection and clears this site's Google Analytics cookies; it does not erase data already collected. We also respect Global Privacy Control and Do Not Track signals in this integration. Google explains its processing in its privacy policy.

Providers and other disclosures

We use Cloudflare and Fastly to host and deliver the service, Resend and email-delivery infrastructure for account messages and contact inquiries, Dodo Payments for payments, and Google for optional sign-in and consent-based website analytics. Providers receive the information needed to perform their role. This does not mean that addresses submitted to the API are sent to our payment or transactional-email providers.

We may disclose information when required by law, to respond to a lawful request, or to protect the service and its users against fraud or abuse. Providers may process information in countries other than your own.

Retention and your choices

We retain account, security, billing and support information for as long as needed for the purposes described here, including resolving disputes, preventing abuse and meeting recordkeeping obligations. Those retention needs are separate from stateless processing of addresses checked through the API.

You can update your name and notification preferences in Settings and manage billing details in your account. You can revoke API keys to stop their use. For access, correction, deletion, account closure or a privacy complaint, email contact@irondome.dev. We may verify your identity before acting, and some billing or security records may need to be retained where permitted or required by law. Additional rights depend on the law that applies to you.

Updates

We will update this page when our practices change and revise the date above. Material changes will be communicated where required by applicable law.