Privacy Policy

What this means for you

EmailLeaked is built to collect as little personal data as possible. Email addresses entered into the checker are processed in real time and are not stored by EmailLeaked as a user lookup database.

Password checks are designed so the plaintext password does not leave your device.

What data we collect

Email addresses: When you enter an email address to check for data breaches, that email is checked against industry-standard breach data sources in real time. It is not written to an EmailLeaked user database.

Passwords: When you use the password checker, your browser hashes the password locally. Only a short hash prefix is sent to a k-anonymity password-range service, so EmailLeaked does not receive or transmit the plaintext password.

Contact form data: If you send a message, we collect the information you provide so we can respond.

How we use data

• To check an email address or password against breach datasets and return the result.
• To respond to messages submitted through the contact form.
• To understand anonymous, aggregated usage patterns and improve the site.

We do not sell, rent, or share personal data for commercial list-building.

What we do not do

• We do not store email addresses entered into the public breach checker as a user lookup database.
• We do not receive plaintext passwords from the password checker.
• We do not target ads based on an email address entered into the checker.
• We do not send unsolicited messages because someone used the checker.

Cookies and tracking technologies

This site may use cookies or similar technologies for essential site functions, analytics, and advertising.

• Essential cookies: Required for the site to work correctly.
• Analytics cookies: Used to understand aggregated site usage. You can opt out through Google's opt-out tool.
• Advertising cookies: Google AdSense and its partners may use cookies to display ads. You can manage ad personalization at Google Ads Settings.

You can control cookies through your browser settings. Disabling cookies may affect some site functionality.

Advertising

EmailLeaked may use Google AdSense to display advertisements. Google and its partners may use cookies or web beacons based on visits to this site and other sites.

We do not control the individual ads shown by Google. Advertising revenue helps keep EmailLeaked free for readers.

Third-party services

EmailLeaked may rely on third-party services for breach checks, password checks, analytics, advertising, hosting, and fonts. These services have their own privacy practices and terms.

Cloudflare Pages hosts the site and may process standard request metadata as part of normal infrastructure operations.

Data security and retention

All connections to EmailLeaked use HTTPS. Because we do not store email addresses entered into the checker as a user database, there is no EmailLeaked lookup database of checker emails to retain.

• Analytics data may be retained according to the analytics provider's settings.
• Contact form messages may be retained long enough to respond and keep basic support records.
• Newsletter data, if collected, is retained until you unsubscribe or request removal.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data. You may also have the right to withdraw consent for analytics or advertising cookies.

To make a privacy request, email [email protected] or use the contact form.

International transfers

EmailLeaked is operated from the United States. If you access the site from another country, some data may be processed in the United States or by service providers in other locations.

Changes to this policy

We may update this Privacy Policy as the site changes, legal requirements change, or service providers change. When we update the policy, we will revise the last-updated date.

Contact and complaints

For privacy questions, email [email protected] or use the contact form.

If you are in the EEA or UK and believe we have not handled your data correctly, you may have the right to contact your local data protection authority.