Last updated: June 2025
Important Notice:
The passwords and logins in our database are NOT harvested by us. They are found from public sources across the internet. We are NOT associated with the harvesters of these logins. We simply aggregate and index publicly available breach data for search purposes.
When you register for an account, we collect and store only the following information:
We do not store any other personal information during the registration process.
We do not collect, store, or analyze any usage information, search queries, or access patterns. Your activity on the service remains completely private.
For data removal requests, we collect additional information such as email addresses, justification for the request, and verification of identity when required.
Your Rights:
Everyone located in a country with laws that require us to remove their logins is free to request a removal. Such requests will be processed in not longer than one month during business days.
Important:
By removing your logins, they will also be blocked from removal ever again. This prevents abuse of the removal system.
Important:
We do not use anyone's information for anything. The account data we store is only used for authentication purposes to allow you to access the service.
The minimal information we collect is used solely for:
We do not analyze, sell, share, or use your information for any other purposes.
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
We store only the minimal account information required for service operation:
No other personal information is stored in our account database.
We retain only the minimal account information (invite code, username, password hash) for as long as your account is active. No usage data, search logs, or access patterns are stored or retained.
Credential data is stored in Elasticsearch for search functionality. This data consists of publicly available breach information from external sources and is not personal information of our users.
We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:
Our service provides access to publicly available data breach information from various sources across the internet. This data was not collected by us but obtained from public sources. We are not responsible for the original collection or harvesting of this data. If you believe your information is included in our database and wish to have it removed, please use our data removal request process.
We use session cookies to maintain your login state. We do not use third-party tracking cookies or analytics services that collect personal information.
You have the right to:
Removal Process:
Our service is operated from various jurisdictions. By using our service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Information:
For Data Removal Requests: [email protected]
For Questions: @glaciar on Telegram
If you have any questions about this Privacy Policy or our data practices, please use the contact methods above.