Privacy Policy

Introduction

StuffingGuard is an open-source tool designed to help you check if your email or password has been compromised in data breaches. We are committed to protecting your privacy and being transparent about how we handle your data.

Data We Don't Collect

Your privacy is our top priority. When you use StuffingGuard:

• We do not store any emails or passwords you search for
• We do not log your search queries
• We do not track your IP address or browsing activity
• We do not use cookies for tracking purposes
• We do not share any data with third parties

How It Works

StuffingGuard checks your email or password against databases of known data breaches. Here's what happens when you perform a search:

1. Your query is processed locally in your browser when possible
2. For password checks, we use a hashing algorithm (SHA-1) to secure your password before sending it
3. Only a partial hash (k-anonymity model) is sent to check against breach databases
4. The results are displayed directly to you
5. No record of your search is kept after you close the page

Open Source Transparency

StuffingGuard is fully open source. You can review our entire codebase on GitHub. This means anyone can verify our privacy claims and see exactly how we handle your data.

Third-Party Services

StuffingGuard queries the following external breach databases to provide accurate results:

• Have I Been Pwned (HIBP) - For password breach checking using k-anonymity
• XposedOrNot - For email breach checking

These services have their own privacy policies that we recommend you review. We implement privacy-preserving techniques like k-anonymity to minimize data exposure even to these services.

Data Security

We implement industry-standard security measures to protect your searches:

• All connections use HTTPS encryption
• Password queries are hashed before transmission
• No server-side logging or storage of search queries
• Regular security audits of our open-source code

Your Rights

Since we don't collect or store your personal data, there is no information to access, modify, or delete. Every search you perform is ephemeral and leaves no trace on our systems.

Self-Hosting

For maximum privacy, you can host StuffingGuard on your own infrastructure. Visit our GitHub repository for instructions on how to set up your own instance.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Since we don't collect your contact information, we can't notify you directly of changes.

Contact

If you have questions about this privacy policy or StuffingGuard, please open an issue on our GitHub repository.