Privacy Policy

When you submit an email to scan, your browser computes a SHA-256 hash of it using the Web Crypto API before it's sent to our servers. That hash — not the email itself — is what gets stored in our database.

The raw email address you type is used only to send your one-time verification link. It's kept in memory (and briefly in a short-lived cache with the same expiry as the link) for the few minutes it takes you to click that link, then it is permanently discarded. It is never written to our primary database.

SHA-256 is a one-way cryptographic function: it's computationally infeasible to reverse a hash back into the original email address. Even if our database were fully exposed, an attacker would not be able to recover the email addresses of our users from it.

The hash also lets us apply rate limits and recognise repeat scans of the same address without ever needing to know what that address is.

Before we scan an email, we confirm you actually own it. We send a secure, single-use link to that address; clicking it proves ownership and starts the scan.

Each link is cryptographically random, expires after 15 minutes, and is invalidated the instant it's used — so it can't be replayed or shared.

A hash of the email address and its domain (e.g. "gmail.com"), the scan's status and timestamps, and the list of services/breaches found for that scan, including any Yes/No confirmations you provide.

None of this data can be linked back to a specific email address by us or anyone else without the original address in hand.

Because we don't store personal data in identifiable form, most GDPR data-subject requests (access, rectification, erasure) are effectively satisfied by design — there is no stored email address to retrieve, correct, or delete.

Our lawful basis for processing is your explicit action of submitting an email and verifying it via the magic link (consent). You may contact us at any time with questions about how a scan was processed, and we will respond within the timelines required by applicable law.