Privacy
Investigation targets are sensitive. Someone researching a phishing domain, a harassment campaign or their own exposure should not have to worry that the tool is building a record of it. This page states exactly what is kept.
No account, no identity
The platform requires no sign-up. An investigation is owned by a random value stored in ahttpOnlycookie in your browser. Only a salted hash of that value is stored, so the database cannot be used to look up who ran what, and another user cannot read your investigations even if they guess an id.
What is stored
The target you entered, the findings collected about it, the evidence backing those findings, and the relationships derived from them. This is the working material of the investigation itself, without it there is no result to show you.
Retention and deletion
Investigations are deleted automatically 30 days after they are created. You can delete any investigation immediately from its workspace or from your history page; deletion is permanent and cascades to every finding, evidence item, relationship, timeline event and report.
Logging
Application logs never contain a full investigation target. Targets are truncated to their first few characters plus a short hash, which is enough to correlate log entries and not enough to reconstruct who or what was researched. Passwords, API keys, tokens and private keys are redacted before any log line is written. Client IP addresses are hashed for rate limiting and never stored in raw form.
Who your target is disclosed to
Collecting open-source intelligence necessarily means querying public services. A domain investigation sends the domain to public DNS resolvers, RDAP registries and certificate transparency logs; a username investigation requests public profile URLs. This is inherent to how the intelligence is gathered. The full source list is published on the sources page so you can see exactly which services are contacted for each kind of target.
Nothing is sent to any advertising system, analytics provider or data broker. The platform runs no third-party tracking of any kind.
AI analysis
If the operator has configured an AI provider and you explicitly request an analysis, the findings already collected are sent to that provider to be summarised. No analysis is ever generated automatically, and it happens only when you press the button, and only for the investigation you are looking at.
Cookies
One cookie, used to own your investigations. Your theme preference is kept in local storage in your browser and never sent to the server. There are no tracking cookies.