Privacy policy.

SPAM the TAM is operated by Revlyn. In this policy, “we”, “us” and “our” mean that operator.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Questions about this policy: privacy@spamthetam.com.

• Enquiries: your name, email, optional sending domain, topic and message.
• Accounts: your email address, name and company, and sign-in records kept by our authentication provider.
• Domain checks: the domain you enter. A check does not need your name or email.
• Technical data: a one-way hash of your IP address (to limit spam and abuse), browser and device details in standard server logs, and, only if you accept analytics cookies, usage statistics.

Please don’t send passwords, email message content or sensitive information (such as health information) through our forms.

We use personal information to respond to enquiries, run your account, run the checks you ask for, keep the service secure, prevent spam and abuse, and, with consent, understand which pages are useful. We don’t sell personal information and we don’t use it for automated decisions that affect you.

We’ll only email you about the enquiry or account you created. There is no marketing email list today. If we add one, it will be opt-in with an unsubscribe link in every message, as the Spam Act 2003 requires.

A check sends the domain you enter to Cloudflare’s public DNS-over-HTTPS resolver and reads the domain’s public SPF, DMARC and MX records. It never accesses a mailbox or message content. Check links include the domain in the address, so anyone you share a link with can see which domain was checked.

Essential (always on): sign-in session storage for account holders, and a stt_consent cookie that remembers your cookie choice for 180 days. Our anti-spam check (Cloudflare Turnstile) runs on the contact form to tell people from bots.

Analytics (only with your consent): if you choose “Accept analytics”, we load Google Analytics 4 with IP anonymisation to measure page visits. If you choose “Essential only”, no analytics script is loaded.

You can change your choice at any time with the “Cookie settings” link in the footer.

We use trusted providers to run the site: Vercel (hosting), Supabase (database and sign-in), Cloudflare (DNS lookups and Turnstile) and, if you consent, Google (analytics). These providers may store or process data in the United States, Europe or other countries outside Australia. We take reasonable steps under APP 8 to make sure they protect it, including choosing providers with published security and privacy commitments.

Data is encrypted in transit (HTTPS), access to stored enquiries is limited to authorised staff, and database rows are protected by access rules. No system is perfectly secure; if a data breach is likely to cause serious harm, we’ll notify you and the OAIC under the Notifiable Data Breaches scheme.

We keep enquiries for up to 24 months after our last contact, account data until you ask us to delete your account, and rate-limit records for one hour.

You can ask to access, correct or delete your personal information by emailing privacy@spamthetam.com or using the contact form with the topic “Privacy request”. We’ll respond within 30 days.

If you’re unhappy with how we handled a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Last updated 22 October 2026. We’ll post any changes on this page.