Privacy Policy
Last updated: April 20, 2026
What we collect
- Account data: email, optional name and avatar URL, the OAuth provider you used (if any), and your sign-in timestamps managed by Supabase Auth.
- Payment data: for card payments, Mollie processes and stores card details — we only see a payment id and status. For crypto payments, NOWPayments stores your payment wallet address — we only see an invoice id and status.
- Search query strings: we store the queries you run (endpoint + query string) so you can browse your in-app search history. Cached upstream responses are stored without per-user attribution.
- Usage logs: endpoint name, status code, duration, cache flag and timestamp — never the response payload — so we can show you usage analytics.
- Credit ledger: a row per purchase (provider, pack, amount, status) and your running balance.
What we do not collect
We do not track you across the web, sell data to third parties, run advertising tracking, or share your usage with anyone outside the service.
Service providers (subprocessors)
See our full subprocessors page. The short list:
- Supabase — authentication, database, storage. EU region.
- Mollie — card payments. EU-headquartered (NL), PCI-DSS Level 1.
- NOWPayments — crypto payment processor.
- OathNet — upstream data source for breach / stealer / OSINT lookups.
- Vercel (or your host) — hosting & edge network.
Cookies
We use a small set of essential cookies for authentication, theme preference and the cookie banner state. No third-party tracking cookies. See our cookie policy.
Data retention
Account data is retained for as long as your account is active. Usage logs are retained for 90 days. Search history is retained until you delete it from your account or close the account. Deleted accounts and their associated data are removed within 30 days. Purchase records are retained for 7 years for accounting compliance.
Your rights
Under GDPR you have the right to access, export, correct and delete your data. You can export and delete most data directly from Settings. For other requests, contact privacy@squarebreach.com.
International transfers
Mollie processes payments in the EEA. NOWPayments operates outside the EEA — your wallet address and payment metadata may be transferred there under appropriate safeguards (Standard Contractual Clauses where applicable).
Contact
Privacy questions: privacy@squarebreach.com. Security disclosures: security@squarebreach.com.