Email Proof
Privacy Policy
No accounts, ads, analytics or tracking, and nothing about you or your work is sent to us.
This policy explains how Email Proof (“the app”), a Mac app that checks an email’s signatures on your Mac and says who it can prove sent it, developed by Kevin Fitzgerald, handles information.
Information we collect
None. Email Proof does not collect, store, sell or share personal information on any server, and it does not include analytics, advertising, crash-reporting or tracking tools of any kind.
Information stored on your Mac
To work, the app keeps the following on your Mac only:
- Pro’s history: for each checked message, the findings, the From and Subject lines and the file name (never the message text), in a file in the app’s own folder on your Mac
- Your settings: whether to look up domain age, whether to keep a history, and whether you’ve seen the welcome screen
- A cached copy of IANA’s public list of domain registries (RDAP), refreshed weekly
- Your license key, in your Mac’s Keychain
The history is in Email Proof’s Application Support folder, settings in its preferences, the registry list in its Caches folder, and the license key in your Keychain. Reports you export are new files, written only where you choose.
Your messages
Email Proof runs in Apple’s App Sandbox, so it can open only the messages you choose, drop or paste, and save only where you choose. Messages are read on your Mac; their text, addresses and attachments are never uploaded or sent anywhere.
Network
To check a message, Email Proof looks up the signing keys and policies of the domains named in it through DNS over HTTPS (Cloudflare, then Google when Cloudflare doesn’t answer), and, unless you turn it off in Settings, asks the domain’s registry (RDAP, found through IANA’s list) when the sender’s domain was registered. These lookups contain domain names only. Email Proof is sold directly through Gumroad: it also checks your license key with Gumroad (when you enter it and about once a week) and looks for app updates at fitztoppicks.com.
Purchases
Email Proof is sold directly through Gumroad, which handles payment and sends your receipt and license key; we never see your payment details. The app sends your license key to Gumroad to check it (when you enter it and about once a week); that is all it sends to Gumroad.
Children’s privacy
Because the app collects no personal information from anyone, it does not knowingly collect personal information from children.
Changes to this policy
If this policy changes, the new version will be posted on this page with a new effective date. If the app ever begins collecting data, this policy will be updated before that happens.
Contact
Questions about this policy or the app: help@fitztoppicks.com.