Communication: all notifications will be sent to _soupnh@name.soupnh.com. So, be adviced that no mails (except ours) will reach this mail address. Also, configure your webhook to notify you about incoming requests from this address. Important stuff (like periodical ownership confirmation) will be sent to it.
Proof of ownership: your webhook must be able to parse and log GET requests with "_soupcheck" parameter, since this is how we check ownership.
Security: to protect your endpoint from non-expected requests, some strategies might be used, like http auth (e.g., https://user:pass@webhook.com), a token passed as a get param (e.g., https://webhook.com?_token=mysecrettoken) and/or validate each request's IP against "mail.soupnh.com" (don't fix our IP address, since we can change it without previous notification).
Privacy: all data is parsed in memory only, so we do not store anything. Keep in mind that, as a result, if your webhook gets offline, you'll miss calls, unless mail is resent (we'll reply sender with a common SMTP retry-later error code, but we do not guarantee that the mail sender will, in fact, retry).
Disclaimer: you are solely responsible for whatever use you make of this tool. It is provided as-is, without any warranty or liability in any form.
Copyright: our SOUP logo was inspired by Tony Leone's Soup Gun © artwork, which is inspired by Andy Warhol's famous tomato soup can design.
Support: please, double check everything (webhook and mail sender) before reaching us out. If everything is working fine, then (and just then) contact us using this secret form here.