Proof of Email logotypeDKIM Archive

Privacy Policy

Privacy policy for Proof of Email

This privacy policy describes how DKIM Archive, operated by Proof of Email (hereinafter referred to as "we", "us", or "our"), accesses, uses, stores and shares your personal information when you use our website located at archive.prove.email (the "website").

Information we access:

  • User email address: When you sign in with your Gmail account to contribute domains and selectors, we use your email address solely for displaying it to you within the platform.
  • Email metadata: With your consent, we access your email message metadata, specifically the header fields, to extract domains and selectors from the DKIM-Signature header field.

Information we store:

  • Domain and selector from the DKIM-Signature header field: For each email message in your email account, we store the domain (d=) and the selector part (s=) of the DKIM-Signature field. The data is used to build our archive of DKIM keys.

Authentication:

  • For the authentication with Google, OAuth 2.0 is used. The OAuth tokens (access and refresh token) are stored in a JSON Web Token in the web browser. The server does not store any tokens.

How we use your information:

  • Displaying your email address: We use your email address for displaying it within the platform when you use the "Upload from Gmail" feature.
  • Build an archive of DKIM keys: We use the extracted domains and selectors from your email header fields to build a publicly accessible archive of historical DKIM keys.
  • Build an archive of hashed emails and their corresponding DKIM signatures:We store the hash of the email content and the corresponding DKIM signature in a database.

Information sharing and disclosure:

  • We do not share your personal information with any third parties except as required by law or to protect our rights and interests.
  • The archived DKIM keys, containing domains and selectors (but not personal information), are publicly accessible on the website.
  • We may share anonymized or aggregated data with third parties for research or analytical purposes.

Data security:

  • We take reasonable steps to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is completely secure, and we cannot guarantee the security of your information.

Your choices:

  • You can choose not to contribute domains and selectors by not using the "Upload from Gmail" feature.
  • You can revoke your consent for us to access your email message metadata at any time by managing your Gmail app permissions.
  • You can request to delete your user account by contacting us.

Changes to this privacy policy:

  • We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on the website.