Privacy Policy

Last updated: 2026-09-21

This policy explains what personal data we collect through this website and our platform, why we collect it, and the rights you have over it.

Who we are

StealerHunt provides breach intelligence services to organizations. For data processed through this website, we act as the data controller. For data processed on behalf of a customer under a service agreement, we act as a processor and that agreement governs.

What we collect

• Information you give us. Your name, work email, company and message when you contact us or request a demo.
• Exposure check input. The domain you submit to the check on our homepage, and the IP address the request came from, used to run the check and to rate-limit abuse.
• Technical data. Standard server logs — IP address, user agent, requested URL, timestamp — retained for security and diagnostics.
• Analytics. Aggregate usage statistics, where you have consented to non-essential cookies.

Why we process it

To respond to your enquiry, to provide and secure our services, to meet legal obligations, and — where you have consented — to understand how the site is used. Our lawful bases are performance of a contract, legitimate interests in operating and securing the service, legal obligation, and consent.

Breach intelligence data

Our platform processes credential data that has already been leaked and is circulating publicly or in criminal channels. We process it to alert the affected organizations, on the legitimate-interest basis of information security. Records are masked by default, access is scoped and logged, and retention is limited to what the service requires. Individuals may request information about, or deletion of, records relating to them.

Sharing

We do not sell personal data. We share it only with service providers who process it on our behalf under contract (hosting, email, analytics), and where required by law.

Retention

Enquiry correspondence is kept for as long as needed to handle your request and for a reasonable period afterwards. Exposure check submissions are retained transiently and expire automatically. Server logs are kept for a limited security window.

Your rights

Subject to applicable law, you may request access to your personal data, correction, erasure, restriction or portability, and you may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. Contact us to exercise any of these rights. You also have the right to complain to your local supervisory authority.

Contact

Questions about this policy or how we handle personal data? Get in touch and we will respond.

This document is a template and should be reviewed by your legal counsel before publication.