This policy explains exactly what this site stores and what it does not. Effective 13 September 2026.
What never leaves your browser: passwords you test, passwords the generator creates, email headers you paste, links you check and quiz answers you have not chosen to save. These tools run entirely on your device.
What the server receives: the email address or phone number you submit for a breach check, the domain you submit for an email security check, and messages you send through the contact form. For breach checks we store a one-way hash of the address, a masked version such as ab***@example.com, and the result, so that your history works when you are signed in. We do not sell or share this data.