Cookie Policy
Last updated: 1 September 2026
1. Introduction & Overview
This Cookie Policy explains how DMARCify (“we”, “our”, or “us”) uses cookies and similar client-side storage technologies when you visit our website (dmarcify.top) and use our email security diagnostic tools.
We adhere to a strict consent-first model under the UK Privacy and Electronic Communications Regulations (PECR), the UK Data Protection Act 2018, the EU GDPR, and Google Consent Mode v2. Non-essential cookies and analytics tags are blocked by default until you provide affirmative consent.
2. What Are Cookies & Local Storage?
Cookies are small text files placed on your computer or mobile device when you access websites. Local storage (such as localStorage) is a browser technology that allows applications to store key-value data directly on your device.
These technologies allow us to remember your privacy choices across page navigation and sessions, prevent automated abuse, and (with your explicit permission) evaluate aggregated traffic metrics to enhance our DNS tools.
3. Cookies We Use & Classification
We classify our cookies and tracking mechanisms into three distinct categories:
| Category | Identifier | Provider | Purpose | Lifespan |
|---|---|---|---|---|
| Strictly Necessary | dmarcify_consent |
DMARCify | Stores your cookie consent preferences and category choices. | 180 days |
| Strictly Necessary | dmarcify_session |
DMARCify | Authenticates your active session and workspace credentials across requests. | 30 days (or until logout) |
| Strictly Necessary | cf_clearance |
Cloudflare, Inc. | Verifies successful completion of Cloudflare Turnstile bot challenges to protect platform APIs from abuse. | Up to 1 year |
| Strictly Necessary | __cf_ob |
Cloudflare, Inc. | Cloudflare Always Online failover cookie that serves cached fallback content if origin server connectivity drops. | Session (up to 30 days) |
| Strictly Necessary | __stripe_mid |
Stripe Payments Europe, Ltd. | Stripe fraud prevention machine identifier that detects card-testing attacks and fraudulent transactions. | 1 year |
| Strictly Necessary | __stripe_sid |
Stripe Payments Europe, Ltd. | Stripe session identifier used to process secure checkout and 3D Secure card verification flows. | 30 minutes |
| Analytics | _ga, _ga_* |
Google LLC | Aggregated usage telemetry and visitor counts. Injected only after explicit consent. | 2 years |
| Analytics | _gid |
Google LLC | Distinguishes unique site visitors across a 24-hour window. | 24 hours |
| Analytics | _clck, _clsk |
Microsoft Corp | Microsoft Clarity UX telemetry and session heatmaps. | 1 year |
| Marketing | __gads, _gcl_au |
Google LLC | Google Auto Ads / AdSense ad delivery and frequency capping. Suppressed for accounts on ad-free plans. | 13 months |
| Marketing | _uetsid, _uetvid |
Microsoft Corp | Microsoft Advertising campaign conversion tracking and attribution. Suppressed for accounts on ad-free plans. | 13 months |
4. Third-Party Services & Privacy Policies
When you consent to optional analytics or marketing tags, or interact with our protected endpoints, data may be processed by the following providers under their respective privacy terms:
-
Stripe Payments Europe, Ltd. (Payment Gateway & Fraud Prevention): When you subscribe to a paid plan or manage billing, payment processing is executed via Stripe. To process payments securely, prevent automated card-testing attacks, and comply with Strong Customer Authentication (SCA) under European payment directives, Stripe sets strictly necessary technical cookies (
__stripe_midand__stripe_sid). These cookies evaluate transaction risk and verify payment legitimacy without harvesting personal profiles for advertising. For further details, read the Stripe Privacy Policy and the Stripe Cookie Policy. -
Cloudflare, Inc. (Edge Security, Turnstile Bot Protection & Failover): We use Cloudflare Turnstile across our authentication workflows (passkey sign in, account recovery, and registration) and rate-limited diagnostic tool forms to verify that requests originate from genuine human visitors rather than automated bots, credential stuffers, or denial-of-service scripts. Turnstile operates as a privacy-preserving alternative to traditional interactive CAPTCHAs by evaluating browser characteristics, session signals, and non-interactive cryptographic proof-of-work challenges without harvesting personal profiles or tracking visitors across websites. Cloudflare sets strictly necessary technical cookies (
cf_clearanceand__cf_ob) to remember validated challenge states, avoid prompting you repeatedly, and provide high availability during network disruptions. For further details, review the Cloudflare Privacy Policy and the Cloudflare Turnstile Overview. -
Google LLC (Google Analytics 4 & Google AdSense): We use Google Analytics 4 (
_ga,_ga_*,_gid) to measure aggregated visitor engagement, popular diagnostic tools, and technical performance metrics. Telemetry is governed by Google Consent Mode v2, ensuring analytics storage remains blocked until you explicitly grant consent. When marketing cookies are accepted, Google AdSense and Auto Ads (__gads,_gcl_au) serve contextual advertisements and enforce frequency capping. Accounts on active ad-free plans automatically suppress all advertising tags and cookies across both public pages and console views. You can review the Google Privacy Policy, learn how Google uses data on partner sites via Google Partner Technologies, install the Google Analytics Opt-out Browser Add-on, or manage personalised advertising on Google Ad Settings. -
Microsoft Corporation (Microsoft Clarity & Microsoft Advertising): We use Microsoft Clarity (
_clck,_clsk) to analyse user experience through aggregated heatmaps, scroll depth tracking, and anonymous session replays. This diagnostic insight helps us identify interface friction and improve tool usability. When marketing consent is granted, Microsoft Advertising Universal Event Tracking tags (_uetsid,_uetvid) measure campaign conversion performance and user attribution. All marketing scripts and cookies remain suppressed for accounts on active ad-free plans. Microsoft captures and processes interaction data in accordance with their privacy standards. You can read the Microsoft Privacy Statement, inspect the Microsoft Clarity Terms of Use, or adjust your advertising preferences via Microsoft Personalised Ad Settings.
5. Managing & Revoking Your Consent
You have full control over non-essential cookies. You can adjust your consent choices at any time by clicking the button below, or clicking the floating cookie icon in the bottom-left corner of any page.
When you revoke or disable a category in our preference centre, DMARCify automatically purges the corresponding cookies from your browser and transmits immediate opt-out signals via Google Consent Mode v2.
6. Contact Us
If you have any questions about this Cookie Policy or our data protection practices, please contact us at:
Email: support@dmarcify.top
Website: https://dmarcify.top