Privacy
When you check a domain, our server looks up its public DNS records, loads its home page, and asks Have I Been Pwned for breaches of that domain. Results are cached for a few minutes. We don't keep a list of domains checked.
If you join the monitoring waitlist, we store your email address, the domain and its grade, and your country (from Cloudflare) to contact you when monitoring opens. Ask us to delete it at any time.
Our host, Cloudflare, keeps standard request logs for security. We don't use advertising trackers.