email-validation.org uses only cookies that are strictly necessary for the service to work, plus a few preferences kept in your own browser. There are no advertising, analytics or tracking cookies, and no third-party scripts on our public pages, so we do not show a consent banner.
What we set
| Name | Type | Set by | Purpose | Duration | Where |
|---|---|---|---|---|---|
| __Host-Http-ev_sid | Cookie · Strictly necessary | email-validation.org | Keeps you signed in. | 7 days of inactivity, at most 30 days | /* |
| __Host-ev_csrf | Cookie · Strictly necessary | email-validation.org | Protects your account against cross-site request forgery. | Same as your session | /* |
| __Host-Http-ev_pre | Cookie · Strictly necessary | email-validation.org | Ties a sign-in code to the browser that asked for it. | 10 minutes | /signin/, /auth/* |
| __Host-Http-ev_oauth | Cookie · Strictly necessary | email-validation.org | Protects the Google sign-in round trip. | 10 minutes | /auth/google/* |
| __Host-Http-ev_wa | Cookie · Strictly necessary | email-validation.org | Holds the encrypted passkey challenge while you confirm a passkey. | 5 minutes | /signin/, /auth/*, /app/* |
| __Host-Http-ev_chat | Cookie · Strictly necessary | email-validation.org | Keeps your support chat conversation together. | 24 hours | /chat/, /api/chat |
| __stripe_mid | Cookie · Payment (Stripe) | Stripe | Fraud prevention by our payment processor; appears only on billing pages. | 1 year (set by Stripe) | /app/billing/* |
| __stripe_sid | Cookie · Payment (Stripe) | Stripe | Fraud prevention by our payment processor; appears only on billing pages. | 30 minutes (set by Stripe) | /app/billing/* |
| ev-theme | Browser storage · Preference | email-validation.org | Remembers whether you chose the light or dark theme. | Until you clear site data | /* |
| ev-lang | Browser storage · Preference | email-validation.org | Remembers the programming language you picked in code examples. | Until you clear site data | /docs/*, /email-verification-api/ |
| ev-dismiss:* | Browser storage · Preference | email-validation.org | Remembers notices you dismissed, such as a credits-expiring banner. | Until you clear site data | /app/* |
| ev-check | Browser storage · Strictly necessary | email-validation.org | Carries the address you checked in the free checker to sign-in when you click a sign-up link, so it never goes in a URL. | Read once at sign-in; ends with the browser tab | /, /email-checker/, /signin/* |
| ev-intent | Browser storage · Strictly necessary | email-validation.org | Remembers what you were doing (check, buy, open a page) while you sign in with Google or a passkey. | Used once after sign-in; ends with the browser tab | /signin/*, /app/* |
- Cookies whose names start with
__Host-are sent only over HTTPS, only to our own domain and cannot be read by other sites. Those markedHttpcannot be read by scripts either. - Browser storage entries stay on your device. They hold preferences such as your theme or code language, never the addresses you check.
Payment pages
Our payment processor, Stripe, may set its own fraud-prevention cookies, but only on the billing pages of your dashboard where you pay. They are needed to accept payments safely.
Page statistics
We count page views on our servers by page, country and the kind of site that sent you. This uses no cookies and no scripts in your browser.
Your choices
You can delete cookies and site data in your browser at any time. Deleting the session cookie signs you out; deleting preferences resets them to the defaults.