Privacy Policy

Last updated: 2026-07-04

This policy explains what The Breach Ledger collects and why.

1. What we collect

• Account data: your name, email, and a hashed password (we never store passwords in plain text).
• Usage data: the type and count of searches you run, to enforce quotas and improve the Service.
• Payment data: handled by our payment provider (WebXPay). We store only an order reference and status, not card details.

2. Search queries

Search terms you enter are sent to our upstream breach-data provider to return results. We log the type of search (regular/advanced) and result count for quota accounting, not the query contents themselves.

3. How we use it

To operate your account, enforce plan limits, process payments, provide support, and meet legal obligations. We do not sell your personal data.

4. Sharing

We share data only with the processors needed to run the Service (hosting, the breach-data API provider, and the payment gateway), and where required by law.

5. Retention & your rights

We keep account data while your account exists. You may request access to, correction of, or deletion of your data by emailing support@example.com. Deleting your account removes your personal data, subject to records we must keep for legal/accounting reasons.

6. Security

Passwords are hashed with bcrypt, traffic is served over HTTPS, and access to the upstream API key is restricted to our servers. No system is perfectly secure, but we take reasonable measures to protect your data.

7. Contact

Privacy questions: support@example.com.