Privacy Policy

Last updated: October 11, 2026.

BreachHunter (https://breach-hunter.onrender.com) is operated by Ingenious AI, Orange Walk Town, Belize. If you have any questions about this policy, contact avilanatanael640@gmail.com.

What we collect

• Account data: the email address you sign up with, and any license key associated with your account.
• Content you submit: scan targets (domain names or URLs) you ask us to assess, and any project notes you create.
• Technical data: IP address, browser type, and pages visited, collected as standard server logs by our hosting provider.

Scan results are assessments of publicly reachable information about the target you provided; we do not collect the target's private data beyond what is needed to produce the report.

How we use it

We use this data to operate the service — running the assessments you request, keeping your account secure, preventing abuse, and improving the product. We never sell your personal data to anyone, and we do not share it with third parties except as described below.

Cookies

We use strictly-necessary cookies to keep you signed in, and a consent cookie (cookie_consent) that remembers the cookie choices you make in our banner — both are required for the site to work. With your permission, chosen in the cookie banner on your first visit, we also use analytics cookies to understand which pages are useful, and marketing cookies for advertising and measuring ad performance. If you decline, no analytics or marketing cookies run at all. You can change your choices at any time with the cookie button at the bottom-left of any page, or by clearing cookies in your browser (blocking the session cookie will sign you out).

Advertising disclosure

This site may display advertisements served by Google AdSense or similar ad networks. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the internet. You may opt out of personalized advertising by visiting Google's Ads Settings or the Digital Advertising Alliance opt-out page.

Third parties

• Hosting: Render (application hosting).
• Database: Neon Postgres (account and scan data).
• Payments: when enabled, payments are processed by our payments provider; card data never touches our servers.

Data retention

Account data is kept while your account is active. Scan reports are retained for up to 12 months so you can track changes over time, then deleted or anonymized. You may request earlier deletion at any time.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email avilanatanael640@gmail.com — we aim to respond within one business day.

Changes to this policy

If we change this policy materially, we will update the "Last updated" date above and, where appropriate, notify account holders by email.