Privacy Policy & GDPR

What we collect, what we never keep, and your GDPR rights: an address is processed in real time for its check and never stored.

Privacy Policy

Welcome to MailTester.Ninja. Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

Information We Collect

When you use MailTester.Ninja, we may collect the following types of information:

Email Addresses: If you input an email address for verification, we process it temporarily.
Usage Data: We collect non-personally identifiable data such as IP addresses, browser type, and access logs to improve our service.
Cookies: We may use cookies to enhance user experience and track site analytics.

How We Use Your Information

We use the collected information for:

Providing and improving our email testing services.
Monitoring site performance and security.
Complying with legal obligations.
We do not sell, rent, or share your data with third parties for marketing purposes.

Data Retention & Security

Email addresses tested through our service are not stored permanently.
We implement appropriate security measures to protect against unauthorized access or disclosure.

Third-Party Services

We may use third-party analytics tools (such as Google Analytics™) to monitor website traffic. These third parties may collect certain information, but they do not have access to personal data entered into our service.

Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

Request access to your data.
Request deletion of your data.
Opt out of certain data processing activities.
If you have any concerns, contact us at contact@mailtester.ninja

Browser Extension

Our browser extension (MailTester Ninja: Email Verifier & Finder) sends to our API only what is needed for the check you ask for: the email address you type, the name and company domain you type to find an address, or the email addresses written on the page you choose to scan. These addresses are processed in memory to return a verdict and are never stored, by the extension or by us. The extension reads a page only when you click Scan this page, keeps your API key in your browser’s extension storage, uses no cookies and no analytics, and does not sell or share any data.

AI Assistants and MCP Server

MailTester Ninja runs an MCP server (mcp.mailtester.ninja) that AI assistants such as ChatGPT and Claude use through their plugin and connector directories. When you use it, the assistant sends us only what the check you asked for needs: the email address to verify, or the first name, last name and company domain used to find an address. We return a verdict (such as Accepted or Rejected), the name of the mail server that answered and, for a search, the address found with its format and a confidence level. To obtain the verdict, our servers ask the mail server of the domain concerned whether the mailbox exists; that mail server sees only the address being checked. We keep no copy of the addresses, names or domains you check, and we never use them for another purpose. Technical counters per key and per domain are kept for a few hours to prevent abuse, and verdict caches per domain for up to three days; nothing in them identifies a person. Your API key is handed to the assistant inside an encrypted token that only our server can read; we store neither the key nor the token, and you can revoke access at any time by disconnecting the plugin or connector in the assistant. We do not receive your conversations, and we do not share any of this data with third parties. Questions: our contact page.

Google Sheets™ Add-on

Our Google Sheets™ add-on (MailTester Ninja for Google Sheets™) reads only the cells you select, or the cell you pass to the MT_VERIFY formula, in the spreadsheet where you use it. It sends the email addresses found in these cells to our API to return a verdict, and writes the results in the two columns next to your selection. It does not access any other file or data of your Google™ account. The addresses are processed in memory and are never stored by us. To avoid checking the same address twice, verdicts are cached for up to six hours by Google Apps Script™ in your own account, under a hashed key. Your API key is stored in the add-on properties of your Google™ account. We do not use this data for advertising, do not sell it and do not share it with anyone. MailTester Ninja’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google™, Google Sheets™, Google Apps Script™ and Google Analytics™ are trademarks of Google LLC.

Mailchimp App

Our app for Mailchimp (connect.mailtester.ninja) connects to your Mailchimp account through Mailchimp’s OAuth sign-in, with your permission. It reads the names of your audiences and the subscribed contacts of the audience you choose to verify, sends each email address to our API to obtain a verdict, and writes the result back to Mailchimp as a tag and three audience fields. If you turn on automatic checks, it adds a webhook to that audience so that Mailchimp sends us each new subscriber’s email address for the same check. If you turn on the archive option, it archives the contacts found invalid. The addresses are processed in memory and are never stored by us. We store only what the app needs to work: your Mailchimp account identifier and name, your Mailchimp access token and your MailTester Ninja key (both encrypted), the names and settings of your audiences, and the counters of each verification. Disconnecting in the app removes our webhooks and deletes this data; you can also revoke the access from your Mailchimp account. We do not use this data for any other purpose and do not share it with anyone. Mailchimp is a trademark of The Rocket Science Group LLC.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date.

Contact Us

For any questions regarding this Privacy Policy, you can reach us using our contact page

GDPR

We temporarily process email addresses to qualify mailing lists. These data are not linked to identifiable individuals and are not stored after the analysis session. This processing is conducted in compliance with the GDPR.

Data Processed

Email addresses.

Purpose

Analysis and qualification of mailing lists.

Data Retention

The data are processed in volatile memory and deleted immediately after the analysis is complete.

Security

The data are not stored or accessible beyond the processing session.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.

This policy is effective as of 1 August 2017.