What MX Audit processes – and what it does not.

1. Controller

MX Audit in Switzerland is responsible for the processing described here. Contact: hello@mxaudit.ch. For a paid order, the seller's complete legal identity and postal address are provided in the individual written order confirmation before payment.

2. Free website and diagnostic tools

Entered domains, DNS findings, email headers and DMARC reports are processed in the browser and are not stored by MX Audit. DNS requests go directly from the browser to Cloudflare's DNS-over-HTTPS service. Cloudflare receives technically necessary network data under its own privacy terms.

MX Audit sets no analytics cookies. Cloudflare Web Analytics measures page views, referrer host, country, device and browser category, plus technical loading and performance metrics. Cloudflare states that it does not collect or use personal data for this service. Separate bounded anonymous events may contain the page, language, acquisition source, campaign label, number of checked domains and score ranges. Those events never contain domain names, entered values, message content or IP addresses, and they are not sent when Do Not Track or Global Privacy Control is enabled.

3. Enquiries, orders and delivery

When you use the enquiry form, MX Audit stores your work email address, company name, company country, approximate domain count, optional message, bounded acquisition labels and acceptance record. The data is stored in a Cloudflare D1 database with EU data location to answer your enquiry and prepare a possible order. The form does not accept domain names.

When you contact MX Audit by email, the sender address, company details and message content are processed for the same purpose. If no order is placed, form and email enquiry data is normally deleted no later than 30 days after the last contact unless longer retention is needed to handle a specific claim.

After an order is confirmed, the agreed domain list, logo and reporting instructions may be processed to produce the Audit Pack.

Working copies of domain lists, branding and reports are normally deleted no later than 30 days after final delivery unless longer retention is required by law, for accounting, or to handle a specific claim.

4. Payments and service providers

Payments are handled by Stripe. Stripe processes contact, business, billing and payment data. MX Audit does not receive complete card details. Payment and accounting records are retained for the period required by law.

Cloudflare is used for hosting, DNS, EU enquiry storage and anonymous usage analytics; Infomaniak for business email; and Stripe for payments. Data may be processed in Switzerland, the European Union, the United States and other countries documented by those providers. Their contractual and statutory transfer safeguards apply to disclosures abroad.

• Cloudflare: hosting, DNS-over-HTTPS, EU D1 enquiry storage, cookieless Web Analytics and anonymous funnel events
• Infomaniak: business email
• Stripe: payment processing, receipts and refunds

5. Rights and security

Subject to applicable law, you may request access, correction, delivery or deletion of personal data and object to processing. Proof of identity may be requested to prevent unauthorised disclosure. You may also contact the Swiss Federal Data Protection and Information Commissioner.

MX Audit limits access to data needed for delivery, uses encrypted transport and does not share customer data for advertising. Absolute security cannot be guaranteed.

6. Changes

This notice will be updated if the actual processing or service providers change materially. The current version and date appear at the top of this page.