Privacy policy

Last updated: July 26, 2026

RedactZero exists to shrink your online exposure, so this policy is deliberately short and deliberately strict. The summary: we do not store your scans, we do not use ad trackers, and the only personal data we keep is an email address you explicitly give us.

We measure traffic with Plausible and with Google Analytics, both configured so they set no cookies and never receive anything you type into the scanner. The Analytics section below says exactly how.

What we collect when you run a scan

Nothing is stored. When you scan an email address or username, the identifier is processed in memory to query public sources, the results are shown to you, and then everything is discarded. We do not write scan inputs or scan results to any database, log file, or analytics system. When you close the page, the scan is gone.

What we collect when you subscribe

If you join our email list (for the privacy checklist, launch notifications, or monthly exposure tips), we store:

  • Your email address
  • The date you subscribed and which form you used
  • Whether and when you unsubscribed

That is the complete list. We use it only to send you the emails you asked for. Every email includes a one-click unsubscribe link, and unsubscribing takes effect immediately.

Monthly re-check (the one scan-storage exception)

Our results page offers an optional monthly re-check. If - and only if - you tick the explicit, unticked-by-default consent box, we store:

  • Your email address
  • The identifier you asked us to watch (an email or username)
  • A minimal snapshot of the last scan - the names of the breaches and public profiles found - so we can tell you what is newnext month
  • Your latest exposure score and the date we last checked

This is the only case in which anything about a scan is stored. We use it solely to run the monthly re-check and email you when new exposure appears. Every such email has a one-click link that both stops the re-checks and deletes this record immediately. You can also email us to delete it at any time.

Analytics

We use two analytics tools, and both are configured so they cannot identify you.

  • Plausible - a privacy-friendly analytics tool that uses no cookies and collects no personal data. It tells us aggregate page views, not who you are.
  • Google Analytics 4 - added July 2026, and deliberately run in a cookieless configuration. We set Google's consent signals to deny all storage before the tag loads, which means it does not write cookies to your browser and cannot build a persistent profile of you across visits. We also disable Google advertising signals and ad personalisation, and enable ads data redaction. The trade-off is on our side, not yours: our visitor counts are less precise as a result.

Neither tool ever receives what you type into the scanner. Your email address or username is held in your browser and sent only to our own server to run the scan - it is never placed in a URL, a page title, or an analytics event, so there is nothing for an analytics provider to collect. There are no advertising trackers, no fingerprinting, and no third-party marketing pixels on this site.

Google Analytics is operated by Google, which may process data outside your country and has its own privacy policy. If you would rather not be measured at all, both tools respect browser-level blocking, and Google publishes an opt-out browser add-on.

Third-party services

Scans query external public sources on your behalf:

  • Have I Been Pwned - breach lookups for email scans. Queries are made server-side; HIBP does not learn your IP address, and we do not retain the query.
  • Public platform checks - username scans check public profile pages on major platforms server-side. We cache the list of platforms we check, never your results.

We recommend third-party data-removal services and may earn a commission if you sign up (see our affiliate disclosure). Those services have their own privacy policies; nothing you scan here is shared with them.

Cookies

The site sets no tracking cookies. Plausible is cookieless by design, and our Google Analytics tag is configured to deny all storage, so it does not set the _ga cookies a default Google Analytics install would. Any cookies present are strictly technical (for example, security-related cookies set by our hosting layer) and are not used to identify or profile you. That is why you do not see a cookie banner here: there is nothing to consent to.

Data security and retention

The site is served exclusively over HTTPS. The email list is stored in a database on our own server, not with a third-party marketing platform. Email addresses are retained until you unsubscribe; you can also ask us to delete your address entirely at any time.

Your rights

Depending on where you live (including under GDPR and the California Consumer Privacy Act), you may have rights to access, correct, or delete personal data we hold about you. Since the only personal data we hold is your email subscription, exercising these rights is simple: email us and we will confirm deletion.

Contact

Questions about this policy: privacy@redactzero.com

Changes

If this policy changes, the date at the top changes with it, and any change that weakens the protections described here will be announced to the email list before it takes effect.