Email Privacy Checker
An email privacy checker finds email addresses that a web page shows in plain text, the form spam bots look for. This free tool fetches your URL, lists every address written in the visible text, in mailto links and in simple disguises like name [at] domain, notes which are protected, and gives practical ways to hide them.
Email Privacy Checker
Technical SEO
About this tool
Spam harvesters crawl the web looking for the at sign. Any address written in plain text on a public page, in a contact section, a footer, a staff list or a blog comment, will in time be collected and sold. The result is inbox clutter, phishing aimed at your team, and for a business address, the risk that real customer mail is lost among it.
The checker loads the page from our server and searches the raw HTML for three things: addresses written out in the text or in attributes, mailto links, and simple disguises such as name [at] domain [dot] com, which bots decode easily. Addresses protected by a Cloudflare email-protection script are reported separately because they are not readable in the HTML.
Hiding an address is a trade-off. A contact form is the safest option and works with every visitor. Using an image or a script hides the address from basic bots but can hurt accessibility and copying. Only the page you enter is scanned, and addresses are shown only so you can find and fix them; nothing is stored or sent anywhere.
Frequently asked questions
How do spam bots find email addresses?
Bots download pages and search the HTML for text shaped like an address, or for mailto links. They do not need to render the page. That is why an address that looks hidden to a visitor, for example in small print, is still exposed if it is written in the HTML.
What is the best way to protect an email address on a website?
Use a contact form, so no address is published. If you must show one, use a role address you can filter such as hello@, keep SPF, DKIM and DMARC in place, and consider script-based obfuscation. Avoid publishing personal addresses of staff on public pages.
Does writing name [at] domain [dot] com work?
It stops the simplest bots, but many harvesters decode common patterns such as [at] and (dot). It also makes the address awkward for visitors to copy. It is better than plain text, weaker than a form, and not a long-term solution on its own.
Are mailto links a problem?
A mailto link contains the full address in the HTML, so bots read it as easily as plain text. It is convenient for visitors, so keep it only for a role address you are happy to filter, or replace it with a contact form on important pages.