How do you collect breach data?

We aggregate data from publicly disclosed breaches, security research, and partnerships with cybersecurity organizations. All data is collected ethically and legally.

Is it safe to search for my credentials?

Yes. We use secure hashing algorithms for searches. Your actual passwords are never sent to our servers - only cryptographic hashes.

What should I do if my data was breached?

Immediately change your passwords on affected accounts, enable two-factor authentication, and monitor your accounts for suspicious activity.

Privacy Policy

1. Introduction

PWND ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our breach monitoring service.

2. Information We Collect

2.1 Information You Provide

Account information (email address, username)
Search queries (emails, URLs, or other identifiers you check for breaches)
Payment information (processed securely through our payment provider)
Communication data when you contact our support

2.2 Automatically Collected Information

IP address and device information
Browser type and operating system
Usage data and analytics
API usage statistics

3. How We Use Your Information

To provide breach monitoring services
To process your searches against our breach database
To manage your account and subscription
To improve our services and develop new features
To send service-related communications
To detect and prevent fraud or abuse
To comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your data:

All data transmissions are encrypted using TLS/SSL
Search queries are processed in memory and not permanently stored
Account passwords are hashed using secure algorithms
Regular security audits and updates
Access controls and monitoring

5. Data Retention

Account information: Retained until account deletion
Search history: Available based on your subscription plan
API logs: Retained for 30 days for security and debugging
Payment records: Retained as required by law

6. Data Sharing

We do not sell, trade, or rent your personal information. We may share data with:

Service providers who assist in operating our platform
Law enforcement when required by law
Third parties with your explicit consent

7. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Export your data
Opt-out of marketing communications
Lodge a complaint with a supervisory authority

8. Cookies and Tracking

We use essential cookies to maintain your session and preferences. Analytics cookies help us understand usage patterns and improve our service. You can control cookie settings in your browser.

9. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

10. International Data Transfers

Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers in compliance with Swiss data protection laws.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our service.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Support: Use the contact form in your dashboard