Privacy.

isitsp.am is operated by Whisper Security (viaGraph B.V., Amsterdam). This page explains what happens when you paste an email here.

Your input

Your pasted email is processed in memory on a Vercel Edge function and discarded as soon as the verdict is returned. We do not write it to a database, log file, or cache. We do not send it to any third party other than Whisper's own infrastructure graph at graph.whisper.security, which receives only the extracted identifiers (domains, IPs, URLs), never the body, headers, or attachments.

Analytics

We use Google Tag Manager and Google Analytics for aggregate, anonymous usage metrics: verdict distribution, latency buckets, identifier-count buckets. We never push the content of your email, the identifiers extracted, or any personally identifying detail into the analytics layer. If you decline non-essential cookies, the analytics scripts do not load.

Rate limiting

We track per-IP request counts to enforce 5 checks per hour and 30 per day. Counters are short-lived (rolling windows) and not associated with anything else about you.

Contact

Questions: hello@whisper.security