Skip to content

Service phase:Alpha This is an early version, expect rough edges.What we store

What we store — and what we never store ​

Trust is our product, so here is the actual inventory. No legalese — that's on the privacy policy, and it says the same things.

The free guide: nothing ​

The guide needs no account and sends nothing to us. Which accounts you picked and which steps you finished live in your browser only. Clear the browser and it is gone; the report page can download a copy for you. The share card carries counts, never which services you use.

If you create an account (optional, not open yet) ​

  • Your account: email address, display name, hashed password (we can't read it), your two-step sign-in settings.
  • Your identities: the names and identifiers (email or username) of the online identities you track. Identifiers are encrypted at the field level — visible to you on demand, unreadable in our database.
  • Your services: which services you follow, per identity.
  • Your check history: what you attested and when ("two-step sign-in turned on GitHub, via authenticator app, March 3rd"), so your history works.
  • Your inventories: if you use the connected-apps checklist, the app names you note down — encrypted, like identifiers.
  • Monitored addresses & breach matches: the addresses you asked us to watch (encrypted) and which known breaches matched them.
  • Notifications we sent you, so you can read them again.

What we never store ​

  • Your passwords for other services. Never asked for, never stored, never transmitted through us.
  • Access to your accounts. No sign-in grants into your Google, no session cookies, no scraping your inbox.
  • The contents of your accounts — no messages, photos, files, or contacts.
  • Your browsing. No trackers, no ad pixels, no fingerprinting on the app or this site.

How it's protected ​

Sensitive fields are encrypted with keys held separately from the database. Lookups on encrypted data use blind indexes (we can find your record without reading it). Everything is encrypted in transit. Our code is statically analyzed and security-scanned in CI on every change, and our security policy welcomes researchers.

Your controls ​

Export everything or delete everything, one click, any plan. Deleting your account deletes your data — not "deactivates," deletes.