Privacy Policy — InboxShield

Last updated: November 13, 2026

InboxShield: SPF, DKIM & DMARC Checker is built with a strict local-first, zero-telemetry architecture. We do not operate any analytics trackers, ad networks, or browsing-history collection servers.

1. Data Accessed When You Click the Extension

When you explicitly open the InboxShield toolbar popup, Chrome's activeTab permission provides the URL of the active tab solely so InboxShield can extract its public root domain name (for example, example.com). InboxShield does not read page text, passwords, cookies, or form inputs, and injects zero background or content scripts.

2. Public DNS Queries

To evaluate email authentication records (MX, SPF, DMARC, DKIM, BIMI, MTA-STS, TLS-RPT, and CAA), your browser sends standard DNS-over-HTTPS (DoH) requests directly to Cloudflare's public resolver (https://cloudflare-dns.com/dns-query) subject to Cloudflare's Public Resolver Privacy Policy.

3. Local Storage & Optional Pro License Keys

InboxShield uses chrome.storage.local on your device exclusively to store:

Your optional Pro license key status (verified only when you submit a key, via Stripe checkout verification or Freemius api.freemius.com).
Your optional white-label agency name/contact string and the most recent audit snapshot so you can print a local PDF report.

4. Data Sharing & Retention

We do not collect, store, sell, or share personal data or browsing activity with any third party.

5. Contact

For privacy questions or support, contact the publisher via the support email listed on our Chrome Web Store listing.