Last updated 13 September 2026 · Version 2026-09-13
LeakPeek ("we") is committed to protecting your personal information. We aim to comply with the privacy laws that apply to us and to you, including United States federal and state privacy laws and, where they apply to you, the UK GDPR and the EU GDPR. This policy explains what we collect, why, how long we keep it, and what you can do about it.
This Privacy Policy will answer the important questions about how we collect, use and store information about you. In case you have any other questions or find any part of this Privacy Policy unclear, our privacy contact is available to assist you as described in Section 10 of this Privacy Policy. Please note that any form of the word 'we' in this Privacy Policy stands for LeakPeek, as specified in Section 2 of this Privacy Policy.
LeakPeek is responsible for protecting your private data and information.
Account. Your email address; your password, which we never store in readable form; the IP address and date you registered from; the IP address of your most recent login; and, if you arrived through an affiliate link, the referral code. If you join the affiliate programme: your referral code and the number of visits and sign-ups it produced.
Security settings. If you enable two-factor authentication: the secret used to generate your codes, your backup codes (hashed, plus the IP address a code was used from), and for each device you choose to trust, a token together with the IP address and browser that used it. Login, registration, password-reset and face-removal submissions are also counted per IP address to decide when to show a security challenge.
Breach searches (email, username, password, keyword, domain, IP, name, hash, phone). These are answered in real time. We do not store the search terms or the results. We keep counters of how many searches an account and an IP address make, without the terms, to enforce fair-use limits and detect abuse. If a search triggers an abuse check or a provider error, the details of that event, including the search term, are recorded in our security log.
People searches (UK and US). The name, phone number, address or location you search for, and the results returned, are kept for 30 days so that you can reopen a previous search.
Face search and face removal. See Section 14.
Breach monitoring. If you ask us to monitor an email address or username (Notify page), we keep that entry, when it was last checked and how many results were found, and an alternative notification email address if you set one. If you have linked your Discord account to LeakPeek through our Discord server bot, we also keep your Discord user id with your account email so that we can notify you there.
Payments. When you start a card or crypto purchase we pass the payment processor your account email address (so the order can be matched to your account), the billing email you enter and your IP address; the processor sends us back the order reference, the email used, the product and the amount paid. We never receive your card number or wallet details.
Support. Support tickets you send through the widget on the site are handled by our support-ticket provider (Section 7).
Site operation. Every request to the site passes through our hosting and security provider, which processes your IP address and request details to protect the site from abuse.
We use this information to provide the Service; to operate, maintain and secure accounts; to enforce usage limits and detect abuse; to take payment and keep accounting records; to answer your requests; to comply with legal obligations, including lawful requests from authorities; and to protect our rights and property.
Yes. We use a small number of cookies, most of which the site needs in order to work:
Your browser also stores some settings and data locally: your theme, the last search type you chose and the last term you entered, the details you last typed into the UK lookup form, a copy of your most recent face-search results, a search term handed from one page to another, and notices you have dismissed. That data stays on your device; we only receive a search term from it when the search is actually run.
We do not use advertising or analytics cookies. You can block or delete cookies in your browser settings; blocking the session cookie will stop you from logging in.
You have to provide us with the information which we need to provide you with services. In the event you do not provide us with this information, we will not be able to provide all offered services.
We obtain your information from: You; your browser and device (for example your IP address); our payment processors, when you buy a membership; and Third Party Data Providers, whose answers to your searches are shown to you.
We share information only where needed to provide the Service and as permitted by law:
We do not sell your information.
| Information | Kept for |
|---|---|
| Your account, and everything attached to it (settings, breach-monitoring entries, notifications and affiliate details) | While your account exists. Deleted when you delete your account from your Profile. |
| Breach search terms and results | Not stored, except in the security-log entries described in Section 3. |
| UK and US people-search queries and results | 30 days, then deleted automatically. You can delete them earlier from the UK Lookup and People pages, and they are deleted when you delete your account. |
| Face search and face removal | As described in Section 14. Face-search photos and results are also deleted when you delete your account. |
| Payment records | Kept as accounting records. When you delete your account, your email address in the records of orders applied to it is replaced with a placeholder. |
| Removal requests and face-removal lists | For as long as the removal stands – they are what keeps you out of results. |
| Data needed to run and secure the site (usage counters, security-challenge records, password-reset links, diagnostic and security logs) | For as long as it is needed for that purpose. |
You can delete your account at any time from your Profile page.
If you wish to do any of the following, please contact our privacy contact as described in Section 10.
To file an inquiry or a complaint, please contact our privacy contact as described in Section 10. Please note that these rights are subject to conditions and exemptions established by law as well as the procedures we will be following in order to assist you.
For any question, request or complaint about how we collect, use or store information about you, contact our privacy contact at support@leakpeek.com. You may also complain to the authority for where you live: in the UK the Information Commissioner's Office (ico.org.uk), in the EU your national data protection authority, in the United States your state attorney general or the Federal Trade Commission.
If you are in the UK or the European Economic Area you have the right to access the information we hold about you, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw any consent you have given. If you live in California or another US state whose privacy law gives you similar rights, we honour those too. Contact us as described in Section 10.
LeakPeek may amend this policy from time to time. Notification of any material changes will be made via the website. You are entitled to withdraw your consent regarding the collection of your data at any time, as long as such consent is not required to provide you with requested services and products.
LeakPeek may notify users of data breaches, either internal or external, per legal requirements. Email notification may be made within 72 hours if the breach involves sensitive personal data. Additionally, users will be notified via email when the breach is resolved. Members can ask us to monitor a limited number of email addresses or usernames on the Notify page. While your membership is active each entry is re-checked about every two days; you are emailed – and, if you have linked your Discord account, messaged there – when new results appear. We keep only the number of results found, not the records.
When you upload photos to face search, we use them only to run the search you asked for:
If you ask us to keep a face out of our face search, what you submit is processed for that purpose only:
You can ask for a removal to be reversed, or for its data to be deleted, by contacting our privacy contact as described in Section 10.