Legal

Privacy Policy

Effective 25 October 2026

This policy explains how Mister Marbi's LLC, doing business as Mister Marbi ("we", "us"), a United States company, handles information when you use tools.mistermarbi.com and the Domain Health Monitor (the "Service"). Questions: support@mistermarbi.com.

What we collect

  • Domains you check. When you use a free checker, we look up the domain's public DNS records, HTTPS connection, public certificate logs and registry data. We don't store the domains you check with free checkers, apart from counting how many checks of each type run per day. Results are cached for about a minute to keep the service fast.
  • Account information. Your email address, the domains you choose to monitor, optional client names and DKIM selectors, your alert channels (email addresses, Slack or webhook URLs), report branding you provide, and the results of checks on your monitored domains.
  • Billing information. Payments are processed by Stripe. We receive your name, email, billing address, country and subscription status from Stripe. We never see or store full card numbers.
  • Technical information. Your IP address is used briefly to prevent abuse (rate limiting); we store only a one-way hash of it, for at most a few hours. Our hosting provider, Cloudflare, processes standard request data to deliver and protect the site.
  • Usage counts. We count events such as "a checker ran" or "checkout started" per day, without cookies or identifiers. We may use Cloudflare Web Analytics, which is cookie-less and doesn't track you across sites.
  • Where you came from. If you arrive through a link that carries campaign tags (such as utm_ parameters or an ad click ID), we keep them in your browser for that visit and attach them to a purchase, so we can tell which channels work. If we start running ads that use these IDs to report conversions to an ad platform, we'll update this policy before we do.
  • Support emails. Messages you send to support@mistermarbi.com and our replies.

Cookies

We set one cookie, mm_session, only when you sign in. It keeps you signed in for up to 30 days. It's strictly necessary and isn't used for advertising. Stripe sets its own cookies on its checkout and billing pages.

How we use information

  • To provide the Service: run checks, send the alerts you configure, show reports, and sign you in.
  • To process payments, refunds and cancellations, and to keep financial records required by law.
  • To answer support requests and prevent abuse.
  • To improve the Service using aggregate counts.

We don't sell personal information, and we don't share it for cross-context behavioural advertising.

Who processes data for us

  • Cloudflare: hosting, database and security.
  • Stripe: payments and the billing portal.
  • Resend: sending sign-in links and alert emails.
  • The Slack workspace or webhook address you provide receives alerts you configure.

Our support desk uses an AI assistant to read and reply to support emails under our instructions.

How long we keep it

  • Account data and check history: while your account is active. Check history older than about 13 months is deleted automatically.
  • Sign-in links expire after 15 minutes; sessions after 30 days of inactivity.
  • If you ask us to delete your account, we delete account and monitoring data within 30 days, except records we must keep for tax and accounting (such as invoices), which Stripe and we keep as required by law.

Your choices and rights

You can remove domains and alert channels at any time on your account page. You can ask us to access, correct, export or delete your information by emailing support@mistermarbi.com from your account's email address. Depending on where you live, you may have additional rights under local law; we'll honour requests as the law requires.

Security

Sign-in tokens and session tokens are stored only as one-way hashes. Data is encrypted in transit. No system is perfectly secure, but we limit what we collect and who can access it.

Children

The Service is for businesses and isn't directed at children under 13. We don't knowingly collect their information.

Changes

We'll post changes here and update the effective date. For significant changes affecting account holders, we'll also email you.