Privacy Policy

TrueMark Email Trust Check is operated by STL Tech Handyman (“we,” “us”). We built this tool for small and midsize businesses to understand email impersonation risk on their domains.

Questions about privacy: support@email-trust-check.com.

Last updated: July 8, 2026.

• We do not sell your personal information to data brokers or unrelated third parties.
• We use information internally to run the check, email your report, improve the product, and understand aggregate risk patterns.
• Domain checks use public DNS records only — we do not log into your email or read your inbox.
• Marketing tips by email are optional and only sent if you check the box on the report form.

You enter a domain name (for example, yourcompany.com). We look up public DNS and email-authentication records (SPF, DKIM, DMARC, and related signals) to produce a grade and explanation.

We may log technical details such as the domain checked, result summary, timestamp, IP address, browser type, and request identifier. This helps us prevent abuse, debug issues, and understand usage patterns.

We do not need your email address for a basic check, and we do not access private mailboxes.

If you choose to receive a full report, we ask for your work email address (not personal providers like Gmail or Yahoo). We use it to:

• Send the report you requested
• Notify our team if you ask for hands-on help (“Fix my domain”)
• Record the lead in our internal systems (for example, a secure spreadsheet or CRM) so we can follow up

We also store the scan context you already saw (domain, grade, risk level, and summary text) with your request so the email makes sense.

Optional tips: A separate checkbox lets you opt in to occasional SMB email-security tips. It is unchecked by default. If you leave it unchecked, we use your email only for the report and related service messages — not for marketing tips.

We use collected information to:

• Deliver reports and respond to fix requests
• Operate and secure the website (rate limits, bot protection, error monitoring)
• Produce aggregate statistics — for example, how many SMB domains lack DMARC — without publishing your personal email
• Improve explanations, guides, and the checking engine

We do not use your data to build unrelated marketing profiles or sell lists to advertisers.

We do not sell your personal information. We share data only with service providers that help us run the site, and only for those purposes:

• Hosting & infrastructure (for example, Google Cloud) to serve the application
• Email delivery (SMTP provider) to send your report and internal notifications
• Bot protection (Cloudflare Turnstile) when enabled on forms
• Analytics (Google Analytics) unless you opt out — see below
• Spreadsheets / automation (for example, Google Sheets via a secured webhook) to log leads and domain checks for operations

These providers process data on our instructions. We choose reputable vendors and limit what we send to what is needed for the service.

We use a small security cookie so form submissions cannot be forged from other sites (CSRF protection).

If analytics is enabled, Google Analytics may set cookies to measure traffic. You can opt out by visiting any page with ?noanalytics=1 — we set a preference cookie so analytics stays off in that browser for up to one year.

We keep lead and check logs as long as needed to operate the service, comply with law, resolve disputes, and maintain security. If you want us to delete information tied to your email address, contact us and we will honor reasonable requests unless we must keep certain records for legal or security reasons.

• Report only: Submit the report form without checking the tips box — you get the report, not marketing tips.
• Analytics off: Add ?noanalytics=1 to the URL once.
• Contact us: Email support@email-trust-check.com to ask what we hold about you or to request deletion.

This service is for businesses and adults making decisions for a company. We do not knowingly collect information from children under 13.

We may update this page when our practices change. The “Last updated” date at the top will change. Continued use after an update means you accept the revised policy for new activity.