Privacy Policy

Last updated: 14 October 2026

BounceLens is a free email list checker, run by an independent developer in India. This page explains what happens to the data you check. Short version: your list stays on your device and we do not store it. The one case where addresses reach our server is the API, and there they are checked and not stored.

Website checker

• The checks run in your browser. The email addresses you paste or upload are not sent to BounceLens servers and are not stored.
• To check that a domain can receive email, your browser asks Cloudflare's public DNS service (1.1.1.1) about the domain name only (the part after the @, e.g. company.com). The part before the @ is never sent anywhere. See Cloudflare's resolver privacy policy.
• The MX checker and SPF/DMARC checker look up the domain you type (and DNS names under it, like _dmarc.company.com) the same way. The domain is added to the page address so you can share or bookmark the result.
• Our pages are served by Cloudflare, which keeps standard, short-lived server logs (IP address, browser, pages visited) for security.
• We count visits with Cloudflare Web Analytics, which uses no cookies and does not track you across sites. It tells us which pages are visited, not who you are.
• We also use Google Analytics to see how visitors find and use the site: which pages are viewed, the site you came from, your approximate country, and your device and browser type. It sets first-party cookies (_ga) to tell visits apart. For visitors in the EEA, the UK and Switzerland these cookies are switched off. When you run a check it also counts which tool was used, whether the input was pasted or a file, and a rough list size (for example "11-100"). Google Analytics never receives the email addresses or domains you check, and its advertising features are turned off. You can opt out with Google's opt-out add-on. See how Google uses this data.
• We use no advertising trackers and sell no data.

Google Sheets add-on

• The add-on reads only the cells you select, checks them the same way as the website, and writes the results into your sheet.
• It does not store, share or copy your spreadsheet data anywhere else, and does not use it for advertising or to train AI models.
• BounceLens's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
• You can remove the add-on at any time from Extensions → Add-ons → Manage add-ons.

How the add-on protects your data

• Runs inside Google. The add-on runs in Google Apps Script, on Google's servers, under your own Google account. Your spreadsheet data is not sent to BounceLens servers, and BounceLens has no access to your spreadsheets or your Google account.
• Smallest access possible. It asks only for access to the spreadsheet it is opened in (spreadsheets.currentonly), to show its sidebar, and to make outside web requests. It cannot open your other files.
• Only domain names leave Google, encrypted. To check a domain, the add-on sends the domain name only (e.g. company.com, never the full email address) to Cloudflare's DNS service (cloudflare-dns.com) over HTTPS (TLS encryption). The add-on is set up so it cannot send requests to any other address.
• Nothing kept. The add-on keeps no email addresses. To avoid repeat lookups, it keeps the DNS answer for each domain name in Google's Apps Script cache for up to 6 hours; this holds no email addresses and is deleted automatically.
• No people involved. No BounceLens person can see your spreadsheet data, and it is never shared with, sold to or transferred to anyone else.

Excel add-in

• The add-in reads only the cells you select and checks them in the add-in panel, the same way as the website: only domain names are looked up, as above. Results are written into your workbook.
• It does not send your workbook data to BounceLens servers, and does not store, share or use it for advertising or to train AI models.
• You can remove the add-in at any time from Home → Add-ins → My add-ins.

Browser extension (Edge, Firefox, Chrome)

• The extension checks the emails you paste, upload or right-click, on your computer, the same way as the website: only domain names are looked up, as above.
• It does not read the web pages you visit. When you choose "Check emails with BounceLens" on selected text, that text is kept in the browser's temporary memory only until the checker opens it.
• It does not send your lists to BounceLens servers, and does not store, share or sell them, or use them for advertising or to train AI models.
• You can remove the extension at any time from your browser's extensions page.

WordPress, Joomla and Craft CMS plugins

• The plugin runs on the website that installs it. It checks the email address typed into that site's forms on that site's own server: only the domain name is looked up, through the server's normal DNS resolver.
• It sends nothing to BounceLens, stores no email addresses, and adds no links or tracking to the site. The WordPress plugin keeps the DNS answer for each domain name on that site for 10 minutes, to keep forms fast.
• The site owner can disable or uninstall it at any time (WordPress: Plugins; Joomla: System → Manage → Plugins; Craft: Settings → Plugins).

Email check API, Zapier and Make

• The email check API is different from the website: the addresses you send do reach BounceLens, because the check runs on our server (a Cloudflare Worker). They are checked, the result is sent back, and they are not saved in any database or file by BounceLens.
• Only the domain name is looked up, through Cloudflare's public DNS, as on the website.
• Cloudflare, which runs the server, keeps standard short-lived request logs (IP address, time, the address of the page or API call) for security and to enforce the rate limit. With a GET call the email address is part of that call's address, so it can appear in those logs. With a POST call it is in the request body, which is not logged. Use POST if that matters to you.
• The BounceLens apps for Zapier and Make send the addresses in your workflow to this API. Zapier and Make also handle that data themselves, under their own privacy policies.
• We do not use addresses sent to the API for advertising, do not sell or share them, and do not use them to train AI models.

n8n node, MCP server and code libraries

• The n8n node, the MCP server, the Docker image and the Go and Clojure libraries run where you install them: inside your n8n, on your computer or on your server.
• They send nothing to BounceLens. Only the domain name is looked up, through Cloudflare's public DNS (1.1.1.1), as on the website.

Paid mailbox checks

BounceLens does not check mailboxes itself. If you click through to a partner such as Bouncer, your list is handled by that company under its own privacy policy. We may earn a commission.

Your rights and contact

Because we do not keep your lists, there is usually nothing to delete. For any privacy question, email [email protected].

If this policy changes, we will update the date at the top of this page.