Privacy Policy

Last updated: February 2, 2026

Overview

Dohrnii ("we," "our," or "the service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our email breach detection service.

Information We Collect

Email Addresses

When you perform a search, we temporarily process your email address to query third-party breach databases. We do not store your email address.

Anonymized Data

We may cache search results using a one-way hash (SHA-256) of email addresses. This hash cannot be reversed to reveal the original email address and is used solely to improve service performance.

Analytics Data

We collect anonymized analytics data including:

  • Email domain (e.g., "gmail.com") - not the full email
  • Number of breaches found (aggregate statistics)
  • Response times for performance monitoring
  • General geographic region (country-level)

Technical Data

We automatically collect certain technical information:

  • IP address (hashed for rate limiting, not stored in plain text)
  • Browser type and version
  • Device type
  • Referring website

How We Use Information

  • To provide breach detection results
  • To prevent abuse through rate limiting
  • To improve service performance and reliability
  • To generate aggregate, anonymized statistics
  • To display relevant advertisements

Third-Party Services

To provide breach detection results, we query the following third-party services:

  • XposedOrNot - Breach database and analytics
  • LeakCheck - Breach database (public API)
  • Have I Been Pwned - Password exposure (k-anonymity API)
  • Ahmia.fi - Tor search engine

Each of these services has their own privacy policies. By using Dohrnii, you acknowledge that your email address will be transmitted to these services.

Cookies

We use the following types of cookies:

  • Essential Cookies: Required for basic site functionality
  • Analytics Cookies: Help us understand how visitors use the site
  • Advertising Cookies: Used to show relevant ads (with your consent)

You can manage your cookie preferences using the cookie consent banner.

Data Retention

  • Email addresses: Not stored
  • Cached results (hashed): 24 hours
  • Rate limit data: 1 hour
  • Analytics logs: 30 days

Your Rights

Depending on your location, you may have the following rights:

  • Right to access information we hold about you
  • Right to request deletion of your data
  • Right to opt out of analytics and advertising
  • Right to lodge a complaint with a supervisory authority

Since we don't store email addresses, there is no personal data to access or delete.

Security

We implement appropriate technical and organizational measures to protect the data we process, including:

  • HTTPS encryption for all data in transit
  • One-way hashing for any stored identifiers
  • Rate limiting to prevent abuse
  • Regular security reviews

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact

If you have questions about this Privacy Policy, please contact us at privacy@dohrnii.org.