Data use
Handling lookup data
Only submit hashed emails you have permission to use for your stated purpose. Treat lookup results and credentials as sensitive.
What the browser tools send
The email-to-HEM converter hashes an email in your browser. Using the converter makes no network request. When you run a lookup from the dashboard, the browser sends the keys to MashedMesh under your signed-in session. Email addresses you enter there are hashed in the browser first; only the hashes leave it.
A hashed email can still relate to an individual. A visible match can include the underlying email address. Limit access to keys and results to people and systems authorized for your use case.
API keys
An API key is shown once, when you create it in the dashboard. Store it in your own secret store and keep it out of shared logs and agent prompts. Revoke a key from the dashboard as soon as you suspect it leaked; a revoked key stops working at once.
Contact
For a suppression request or a question about data use or credentials, email info@mashedmesh.com.