Privacy Policy
Last updated
This policy explains what ProbeKit stores, why, and for how long. ProbeKit is operated by Azul Services (Azul-Services, LLC), Las Vegas, Nevada, which is the controller of the personal data described here. If you use ProbeKit for a business, our Data Processing Addendum covers the data we process on your behalf.
The short version
- We don’t sell or rent personal data, and we don’t show ads.
- No ad trackers, no third-party pixels, no cross-site tracking. Analytics, when enabled, are cookieless.
- One cookie, set only when you sign in, so you stay signed in. That’s why there is no cookie banner.
- The domains and IP addresses you look up without an account are not saved in our database.
- AI features send the result you ask about to Anthropic’s API. Anthropic does not train its models on that data.
- You can delete your account, and everything in it, from the Account page at any time.
What we store for an account
| Data | Why | Kept |
|---|---|---|
| Email address, display name (optional), organization name and timezone | Your account, sign-in and the emails you ask for | Until you delete your account |
| Password, stored only as a one-way hash (never the password itself) | Password sign-in | Until you change it or delete your account |
| Passkeys: the public key, a name you choose and when it was added and last used | Passkey sign-in (your fingerprint or face never leaves your device) | Until you remove the passkey or delete your account |
| Linked Microsoft or Google sign-ins: which provider, the account ID it gives ProbeKit, and the email address it reported | Signing you in with that account (we never receive its password) | Until you unlink it or delete your account |
| Sign-in sessions: a random token stored only as a hash, plus the IP address and browser of each session | Keeping you signed in; listed under Account → Security so you can spot and revoke sessions | Deleted when you sign out, revoke it or reset your password; otherwise expires after 30 days and is removed the next night |
| Security log: sign-ins, password, plan, API key and team changes, with the IP address | Protecting your account and showing you recent activity | While your account exists; deleted with it |
| Monitors and their settings, alert channels (email addresses, webhook URLs and signing secrets), status pages, team members and invites, clients and branding | The monitoring and alerting you set up | Until you delete them or your account |
| Check results, incidents, alert deliveries and results you save | Monitor history and your Saved tab | Free 7 days, Pro 1 year, MSP 2 years |
| Push notification devices: the push address and keys your browser gave us and a device name; for each notification, which push service took it, its answer, and when the device showed it | Sending alerts to the devices you turn on and showing each device’s status under Account → Notifications | Devices until you turn them off or revoke them; the per-notification log for 30 days |
| Recent domains: the last 15 targets you looked up while signed in | Prefilling the next lookup | Until you clear them (or delete your account) |
| API keys, stored only as a hash, with their names and daily request counts | The developer API and its quotas | Until you revoke the key or delete your account |
| Plan and billing: Stripe customer and subscription IDs and status (once paid plans are live) | Knowing which plan you have; card details go straight to Stripe and never reach us | While your account exists |
| Usage counts: AI explains and Diagnose runs used this day or month | Plan allowances | 62 days |
| Email preferences and which product emails we already sent you | Respecting your choices and not repeating ourselves | While your account exists |
What we store when you run a lookup
A lookup (MX, SPF, blacklist, ping, HTTP and so on) runs on our infrastructure, which sends DNS queries and network probes to the target you entered. The target sees traffic from us, not from you.
- Not signed in: the result is shown to you and not saved in our database. Shareable result links carry the target in the address and re-run the lookup when opened.
- Signed in: the target goes into your recent domains (above). Results are saved only when you press Save, and then follow your plan’s history window.
- Server logs: each request writes one line with the time, the address requested (for a lookup that includes the target), the response status and your IP address (IPv6 addresses shortened to their network prefix). We use these lines to stop abuse. They never contain passwords, form contents or email bodies, they are not copied into the database, and the logs are size-limited, so older lines are overwritten.
- Daily allowances without an account (AI explains, Diagnose runs) are counted against a one-way hash of your IP address, never the address itself, and the counts are deleted after 62 days. Rate limits are counted in memory only.
Hosted DMARC reports
If you point your domain’s DMARC rua= address at the one ProbeKit gives you, mailbox providers send us aggregate DMARC reports for that domain. These reports contain the reporting organization, the date range, the IP addresses that sent mail as your domain, message counts, SPF/DKIM/DMARC results and the domains involved. They do not contain message contents or recipients. We parse each report, look up the reverse-DNS name and provider of each sending IP, store the parsed data, and delete the original email right after parsing.
- Parsed report data is kept for Free 7 days, Pro 90 days, MSP 1 year.
- Report mail we refuse (too large, malformed or unsafe) keeps a short sample (the start of the message, the sender and the subject) for 30 days so we can troubleshoot, then it is deleted.
Live mail test
When you send a message to a one-time test address, we analyze its headers and store the result: the sender address, the subject, the sending server, the SPF/DKIM/DMARC results and the delivery path. We don’t keep the message body. Results are deleted after 7 days.
AI features (Anthropic)
Some features use Claude, a model from Anthropic, through Anthropic’s commercial API. Nothing is sent unless one of these features runs:
- Explain & Fix on a result, and explain in more detail in Diagnose: the tool result you’re looking at (domain names, DNS records, IP addresses, server responses) or the bounce text you pasted, which may include email addresses and headers.
- DMARC summary: aggregate statistics for the domain (counts, pass rates, top sending sources).
- Alert notes, the weekly digest and MSP client reports: the monitor, its target and the check summary, or your domains’ health scores.
We never send your password, payment details or account email address (other than anything inside text you paste). Under Anthropic’s commercial terms, data sent through its API is not used to train its models; Anthropic may keep it for a limited time for safety and abuse monitoring under its own privacy policy. We cache each AI answer for 24 hours so repeat requests don’t call the model again (deleted after 2 days), and we log token counts per organization (no content) to enforce usage caps. If AI is switched off, nothing is sent.
Cookies, local storage and analytics
One cookie, only when you sign in
pk_session keeps you signed in. It is set when you sign in, is not readable by scripts, is sent only to ProbeKit, and is deleted when you sign out or after 30 days. While a Microsoft or Google sign-in is in progress, a second cookie, pk_oidc, holds a one-time security code for up to 10 minutes so the answer from Microsoft or Google can only complete the sign-in you started. If you never sign in, ProbeKit sets no cookies at all.
Local storage stays in your browser
Your theme choice, recent domains while signed out and a few interface preferences are kept in your browser’s local storage. They are not sent to us, and clearing your browser data removes them.
Analytics without tracking
When enabled, we count page views and a handful of named product events (such as a tool run or a sign-up) with privacy-friendly analytics that we run on our own infrastructure. It sets no cookies, doesn’t follow you across sites and doesn’t store your IP address. We use no advertising or social-media trackers.
Product events in our own database
To learn which parts of ProbeKit lead people to sign up and upgrade, we record a few product events in our own database: a tool run, a sign-up, a verified email, a first monitor, reaching a plan limit, seeing an upgrade prompt, starting checkout or a trial, paying and cancelling. Each event stores its name, the tool or limit involved, the plan and, when you are signed in, your account. For visitors who aren’t signed in it stores a pseudonymous code that changes every day: the IP address itself is never stored, and after that day the code can’t be traced back to anyone. Events are deleted after 90 days.
Why there is no cookie banner
EU and UK rules require consent for cookies and similar storage unless they are strictly necessary for a service you asked for. The two sign-in cookies are strictly necessary for signing in, local storage holds only the choices you make in the interface, and our analytics and product events use neither cookies nor device storage. With nothing that needs consent, a banner would only get in your way.
Email we send
Account email (verification, password reset, and a notice if someone tries to sign up with your address), the alerts and reports you configure, the weekly digest if you opt in, notices when you hit a plan limit, and a few product tips. Product tips carry a one-click unsubscribe link and can be turned off under Account → Preferences; account and alert email can’t be, because the service depends on it.
Messages you send us
The contact form sends your name, email address, topic and message to our inbox as an email, with your address as the one to reply to. ProbeKit’s database keeps no copy and the form never emails you itself. We use the message only to answer you, and keep the conversation for as long as that and any follow-up take.
Who we share data with
- Anthropic: AI features, as described above.
- Stripe: payments, once paid plans are live. Stripe receives your billing email and payment details directly.
- Our email provider: it hosts our inbox, so it holds the messages you send us and our replies.
- Microsoft and Google, only if you choose to sign in with them: they confirm who you are and send us your name and email address. Their own privacy policies cover that sign-in.
- Authorities: only when the law requires it, and we will tell you unless we are legally prevented.
Everything else, including sending the email described above, runs on our infrastructure. ProbeKit is hosted and operated in the United States, so your data is processed in the United States. The DPA summary lists our sub-processors and explains how we handle transfers for business customers.
Backups
Deleted data may remain in backups for a limited period before being overwritten.
Your choices and rights
- See and change your details on the Account page; remove monitors, channels, recent domains and saved results at any time.
- Delete your account under Account → Danger zone. This removes every organization you own and everything in it (monitors, DMARC data, reports, API keys, your security log) and cancels any subscription.
- Ask for a copy of your data, a correction, or anything else under privacy laws such as the GDPR or the California Consumer Privacy Act by emailing pk@azul-services.com or through the contact form. We answer within 30 days and never charge for it.
- If you are in the EU or UK, you can also complain to your data protection authority.
Legal bases (EU and UK)
We process account and service data to provide ProbeKit to you (contract), security logs and abuse controls to keep the service and other people safe (legitimate interests), contact-form messages to answer them (legitimate interests), product tips and cookieless analytics to improve ProbeKit (legitimate interests, and you can opt out), and billing records because tax law requires it (legal obligation).
Children
ProbeKit is a tool for IT professionals and is not meant for anyone under 16.
Changes to this policy
When we change this policy we update the date above. If a change affects how we use data you have already given us, we email account holders before it takes effect.
Questions? Use our contact form or email pk@azul-services.com. ProbeKit is operated by Azul Services (Azul-Services, LLC), Las Vegas, Nevada.