When the Domain API is used, the submitted domain may be stored for analytical and operational purposes, including maintaining domain detection data, monitoring service usage, security, abuse prevention, and improving StopReg's classification systems.

The Domain API does not require the complete email address.

The Domain API may perform:

• Disposable domain detection
• Relay domain detection
• Private and public domain classification
• EDU domain identification
• ISP domain identification
• Free subdomain identification
• Domain syntax validation
• MX record verification
• Mail provider identification
• Domain infrastructure analysis

StopReg analyzes submitted email addresses and domains using multiple validation and classification signals. Depending on the endpoint and information available, classification results may include:

• Disposable (is_disposable)
• Relay (is_relay)
• Private (is_private)
• Public (is_public)
• Role-based (is_role_based)
• Alias (is_alias)
• Alias Method (alias_method)
• EDU (is_edu)
• ISP (is_isp)
• Free Subdomain (is_free_subdomain)

These classifications help customers understand the characteristics of an email address or domain and determine how they want to handle it within their own systems.

Domain Management features are available on the Scale plan and higher. Depending on the customer's subscription and configuration, Domain Management may include:

• Allowlist
• Blocklist
• Form Abuse Shield

Allowlist: Customers can add domains or email addresses to an allowlist to explicitly permit matching sources according to their configuration.

Blocklist: Customers can add domains or email addresses to a blocklist to prevent matching sources from being accepted according to their configuration.

Form Abuse Shield: Form Abuse Shield monitors registration activity associated with private and relay domains. When a domain reaches the registration threshold configured by the customer within the selected time window, StopReg can automatically notify the customer or block further registrations from that domain. Depending on the customer's selected configuration, the system can:

• Notify Mode: Automatically send an email alert containing relevant domain details and threshold information.
• Block Mode: Automatically block the domain from making further registrations.

To provide Form Abuse Shield, StopReg may process information such as the domain associated with a registration, registration activity, registration counts, configured thresholds, selected time windows, and the action selected by the customer.

StopReg's Enforcement Policy allows customers to configure how email addresses and domains are handled based on StopReg classification results. Depending on the customer's configuration, classification results may be used to:

• Allow an email address or domain
• Warn or flag an email address or domain for review
• Block an email address or domain

To provide this feature, StopReg may process classification results, submitted email addresses or domains, and the customer's configured enforcement settings. The detailed functionality and configuration options for Enforcement Policy are provided on the separate Enforcement Policy page. Customers are responsible for configuring and using Enforcement Policy according to their own requirements and applicable laws.

StopReg retains information only for as long as reasonably necessary to provide, maintain, secure, analyze, and improve our services.

Email API: Email Addresses: When the Email API is used, submitted email addresses may be stored for analytical and operational purposes. This may include maintaining detection data, monitoring service usage, preventing abuse, maintaining security, and improving the accuracy and performance of StopReg's classification systems.

Domain API: Domains: When the Domain API is used, submitted domain names may be stored for analytical and operational purposes. This may include maintaining domain detection data, monitoring service usage, preventing abuse, maintaining security, and improving the accuracy and performance of StopReg's classification systems.

Account Information: Account information is retained only as necessary for billing, support, and account management.

Deletion Requests: Requests for deletion of account information or personal data can be submitted at any time by contacting: [email protected]

We may retain certain information where necessary to comply with legal obligations, prevent abuse, resolve disputes, or protect the security and integrity of our services.

StopReg is committed to responsible data processing and supports applicable data protection requirements, including the General Data Protection Regulation (GDPR) where applicable. Our approach includes:

Data Minimization: We aim to collect and process only information reasonably necessary to provide our services.

Domain-Only API: Customers can use the Domain API when they prefer not to transmit complete email addresses to StopReg.

Secure Processing: StopReg uses reasonable technical and organizational safeguards, including encryption, secure API access, and access controls, to protect information processed through our services.

We do not sell, rent, or share your data with third parties for marketing purposes.

Data may be shared only when reasonably necessary, including:

• With payment processors to complete transactions
• With service providers supporting hosting, infrastructure, security, analytics, email delivery, or customer support
• As required by applicable law or valid legal process
• To protect the legal rights, security, property, or safety of StopReg, our users, or others

Depending on applicable law, you may have the right to:

• Request deletion of your account or personal data
• Access information we hold about your account
• Request correction of inaccurate account information
• Request information about how your personal data is processed

Privacy requests can be submitted to: [email protected]

We may request information necessary to verify the identity of the requester before processing certain requests.

StopReg uses limited cookies and similar technologies necessary for website functionality, authentication, security, and analytics.

Cookies are not used to sell personal information or to track personal data for third-party marketing purposes.

StopReg uses reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include encryption, secure API access, authentication controls, access restrictions, and other appropriate security practices.

The StopReg website may contain links to third-party websites or services.

StopReg is not responsible for the privacy practices, content, security, or policies of external websites. We recommend reviewing the privacy policy of any third-party website before providing personal information.

API rate limits depend on the customer's subscription plan:

• Free trial: Up to 20 requests per minute
• Paid plans: Up to 5 requests per second

Requests exceeding the applicable rate limit may be temporarily rejected until the relevant rate-limit period resets.

We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices, or applicable legal requirements.

Updates will be posted on this page with a revised Last Updated date.

For questions, concerns, or requests regarding your privacy or how StopReg processes information:

Email: [email protected]
Website: StopReg.com