Privacy Policy
Last updated: 9 October 2026
Who we are
SimpleVerifier (simpleverifier.com) is an email verification service. In this policy, “we” and “us” mean SimpleVerifier. We are the controller of the personal data described here. If you have a question about it, email support@simpleverifier.com.
This policy describes what the site and service actually do today. We keep it short and in plain English, and we update it when the product changes.
What we collect and why
Your account
You sign in with Google. From your Google profile we store your email address and your name in our account database, along with your plan, whether your subscription is active and the date your account was created. We use this to sign you in, give you access to what you pay for, and show your verification history. We do not store a password for you, and we do not store your Google profile picture in our database.
Payments
Payments are taken by Stripe in an embedded checkout. Your card details go directly to Stripe and never reach our servers. From Stripe we keep your email address, the name you entered at checkout, your plan and your Stripe subscription ID, and we look up your subscription status in Stripe to decide whether your account is active.
Lists you upload and addresses you verify
When you upload a CSV or check a single address, the file or address is sent to our verification server, which checks each address with DNS lookups and a conversation with the recipient’s mail server. Your verification jobs (the file name, the number of addresses, the results and a downloadable results file) are stored on that server against your account email so that your history and downloads follow you between devices. Confirmed results are also cached by address for 14 days, so a repeat check is instant. We do not use your lists for marketing, and we do not sell or share them.
Email finder and lead search
When you use the email finder, the first names, last names and company domains you enter are sent to our verification server, which tests likely addresses against the company’s mail server. When you use lead search, the business type and locations you enter are sent to the same server, and your monthly usage is recorded against your account email.
The results of these features are about third parties: publicly available business listings and information published on business websites, such as business names, phone numbers, addresses, owner names, contact emails and social profiles. If you are one of those people and want to know what we hold about you, or want it removed, email support@simpleverifier.com.
The free tools
- Email verifier: the one address you enter is sent to our verification server and checked; the result may be cached for up to 14 days like any other check.
- Catch-all checker: only the domain is used. If you type a full address, the part before the @ is discarded and a random address at that domain is tested instead.
- Free list check (/try): your file is read in your browser. Domain names are sent for the MX and disposable lookups, and up to 25 sampled addresses are sent to our verification server and checked; those results may be cached for up to 14 days like any other check. The file itself is not uploaded.
- Email list health check: your list is processed in your browser. Only the domain names are sent to us, and that request is neither logged nor stored by our code.
- Deliverability, DNS record and DKIM checkers: only the domain (and DKIM selector, if you give one) is sent, for public DNS and blocklist lookups.
- Disposable email checker: the domain is looked up in a list bundled with the site. Nothing is sent to any third party.
- Email header analyzer, SPF and DMARC generators and the cost calculator: these run entirely in your browser. What you paste is never sent to us.
To stop abuse of the free tools, we count requests per IP address for one minute. That count is held only in memory and is not written to any database.
Analytics
We use Vercel Web Analytics, which counts page views without cookies and without storing your IP address. We also use Google Analytics 4 to understand how the site is used. Google Analytics is configured with advertising features off: ad storage, ad user data and ad personalisation are always denied. In the European Economic Area, the UK, Switzerland and Brazil, Google Analytics cookies are not set unless you accept them. See Cookies for details.
We also use PostHog to see which pages and steps people use, and to record sessions so we can find and fix problems. Recordings hide everything typed into form fields. PostHog runs without cookies unless you accept analytics cookies. When you are signed in, we link your visits with a scrambled (hashed) version of your email address, so PostHog never receives the address itself.
Server logs
Like every website, our hosting provider records technical information about requests, such as your IP address, browser type, the page requested and the time. Our own code also writes a short log line with your email address when a subscription starts or ends, and logs errors. We use logs to keep the service running, fix problems and prevent abuse.
Legal bases (GDPR and UK GDPR)
- Contract: your account, payments, verification jobs, the email finder and lead search, because we need this data to provide the service you signed up for.
- Legitimate interests: running the free tools, rate limiting, security, server logs, cookieless Vercel Analytics, and Google Analytics outside the regions where we ask for consent. We also rely on legitimate interests to process the public business information returned by the email finder and lead search, and you can object to that at any time.
- Consent: Google Analytics cookies for visitors in the EEA, the UK, Switzerland and Brazil. You can withdraw consent at any time using the buttons in the Cookies section.
- Legal obligation: keeping payment records that tax and accounting law requires.
How long we keep it
- Account record: kept while your account exists, and deleted when you ask us to delete it.
- Verification jobs and results files: kept while your account is active so you can download them from your history, and deleted on request.
- Cached verification results: 14 days.
- Rate-limit counters: about a minute, in memory only.
- Google Analytics data: kept by Google for the retention period set in our Google Analytics account.
- Payment records: held by Stripe, and kept for as long as tax and accounting law requires.
- Server logs: kept by our hosting providers for their standard log retention periods.
International transfers
Our service providers process data in several countries, including the United States. When personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on the safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework where a provider is certified.
Your rights
Wherever you live, you can ask us what data we hold about you, ask us to correct it, or ask us to delete it. Email support@simpleverifier.com from the address on your account, and we will reply within 30 days. We may need to confirm your identity first. We will never treat you differently for using your rights.
- EEA and UK (GDPR and UK GDPR): you have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can also complain to your local data protection authority, or in the UK to the Information Commissioner’s Office.
- Brazil (LGPD): you can confirm whether we process your data, access it, correct it, have unnecessary data anonymised or deleted, port it, learn who we share it with, and revoke consent. You can also complain to the ANPD.
- California (CCPA): you can ask to know what personal information we collect, use and disclose, and ask us to correct or delete it. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Children
SimpleVerifier is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email support@simpleverifier.com and we will delete it.
Security
The site is served over HTTPS, the account database is read and written only by our server-side code, and card payments are handled entirely by Stripe. No system is perfectly secure, but we limit what we collect so there is less to protect.
Changes to this policy
When we change how we handle data, we update this page and the “Last updated” date at the top. If a change is significant, we will say so clearly on this page.
Contact
For any privacy question or request, email support@simpleverifier.com.