Privacy Policy

This policy explains what Breach Horizon collects when you use breachhorizon.com, how that information is used, which providers process it, and how to contact us. We do not sell, rent, or broker personal data, and no account is required to run public tools.

Public scans and security tools

When you submit a domain or URL, our backend processes it to perform public DNS lookups, TLS handshakes, certificate inspection, and HTTP-header requests. We use scan input to return results, prevent abuse, and troubleshoot operational issues. Hosting logs may include the domain or URL, timestamp, response status, IP address, and user agent for the provider's limited operational retention period. Public scans do not request credentials or access internal networks.

Analytics

We may use Plausible Analytics to understand aggregate traffic and page performance. Plausible does not use cookies or persistent identifiers. It may process page URL, referrer, device and browser type, operating system, screen size, and approximate location derived from an IP address. We use this information to improve the site, not for ad targeting.

Contact, reports, alerts, and subscriptions

If you choose to contact us, request an emailed report, subscribe, or enable an alert, we process the fields you submit. These may include your email address, name, company, domain, message, preferences, and confirmation or unsubscribe status. We use the data to provide the requested service, respond to you, maintain suppression records, and prevent abuse. Running a scan alone does not add you to a newsletter.

Service providers

Depending on the feature, data may be processed by Vercel for hosting and function logs; Cloudflare for public DNS-over-HTTPS lookups; Plausible for aggregate analytics; Resend for transactional email; Upstash Redis for subscription or alert state; and Beehiiv for an update subscription you explicitly request. Each provider operates under its own privacy and security terms.

Retention and international processing

Scan results are not intended to become user profiles. Hosting logs follow Vercel's operational retention. Contact messages and requested email, alert, or subscription records are retained only while needed to provide the service, preserve unsubscribe state, prevent abuse, maintain business records, or meet legal obligations. Providers may process data in the United States, European Union, and other regions where they operate.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or object to processing of personal information. To request deletion, unsubscribe help, or information associated with your email address, email [email protected]. We may need to verify control of the relevant address.

Children, security, and changes

The site is intended for adults and business users, and we do not knowingly collect information from anyone under 16. We use reasonable safeguards including HTTPS, security headers, validation, abuse controls, and limited provider access, but no internet service can guarantee absolute security. We may update this policy as the service changes and will revise the date above.

Contact

For privacy questions, deletion requests, unsubscribe issues, or complaints, email [email protected].