The short version
- By default we use only strictly necessary cookies: to keep you signed in, to protect the public checker from bots, and to remember your cookie choice.
- Google Analytics 4 runs only if you accept analytics in the cookie banner. You can change your mind at any time.
- We don’t use advertising cookies and don’t sell data.
Strictly necessary cookies
These make the site work and keep it secure. They don’t need consent.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
__Host-ibe_session |
isbusinessemail.com | Keeps you signed in to the dashboard. Contains a random token; we store only its hash. | Until you sign out or the session expires |
__Host-ibe_pass |
isbusinessemail.com | Short-lived pass after you complete the human check on the public checker, so you don’t have to repeat it for every lookup | 10 minutes |
| Cookie consent choice | isbusinessemail.com | Remembers whether you accepted or rejected analytics | Up to 12 months |
cf_clearance and similar security cookies |
Cloudflare | Set only if Cloudflare shows a security challenge, to remember that you passed it | Short-lived (as set by Cloudflare) |
The human check on the public checker uses Cloudflare Turnstile, which processes browser and device signals to tell people from bots. See Cloudflare’s privacy information.
We may also keep simple preferences, such as light or dark theme, in your browser’s local storage. These never leave your device.
Analytics cookies (only with consent)
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics 4 | Distinguishes visitors | Up to 2 years |
_ga_<container-id> |
Google Analytics 4 | Keeps session state | Up to 2 years |
How we use Google Analytics:
- We use Google Consent Mode v2 with everything denied by default. Until you accept, Google Analytics isn’t loaded and sets no cookies.
- If you accept, we measure page views and a few product events (for example sign-up and first API key). Page addresses are sent without query strings, and we never send email addresses or other personal data you type into the site.
- Advertising features are off: ad storage, ad personalization and ad user data stay denied.
- Data is kept for 14 months (Google Analytics setting) and processed by Google as described in our Privacy Policy.
Legal basis: your consent (Art. 6(1)(a) GDPR, and the ePrivacy rules as implemented in Lithuanian law).
Changing your choice
Use the Cookie settings link in the site footer to accept or withdraw consent at any time. Withdrawing stops analytics from then on; you can also delete existing cookies in your browser settings.
You can block cookies in your browser, but if you block strictly necessary cookies you won’t be able to sign in or use the public checker.
The API
The API at api.isbusinessemail.com doesn’t use cookies. It authenticates with API keys.
Contact
Questions: privacy@isbusinessemail.com.
Changes
| Version | Changes |
|---|---|
| 2026-10-04 | First version. |