Privacy policy

What we store

Your account email, a secure hash of your password, the data you add to your profile (names, emails, phone numbers, etc.), and the results of your scans.

Why

Only to search for exposure of your own personal data and to show you how to fix it. Legal basis: your consent and the performance of the service you asked for (Art. 6(1)(a) and (b) GDPR).

Who receives it

To run a scan, search terms are sent to the services that perform the search: XposedOrNot (breach checks for your emails), Gravatar (a hash of your emails) and, if enabled, a web search API (Brave Search or Google). A deep scan also opens the public pages found and checks your usernames on public websites (site list by the WhatsMyName project, CC BY-SA 4.0). We never sell or share your data for marketing.

How long

Until you delete it. You can edit your data at any time and delete your account, which immediately removes all your data from our database.

Your rights

You can access, export, correct and delete your data from your account page. You can also complain to the Portuguese data protection authority (CNPD).

Cookies

We only use a strictly necessary session cookie and a cookie to remember your language. No tracking, no analytics, no ads.

Acceptable use

You may only search for your own data or data you are authorised to search for. Accounts used to investigate other people will be removed.