About this document
Fenntrace is a hackathon prototype demonstrating a privacy-first exposure investigation product. This privacy policy describes how the prototype handles data during an exposure check.
This document does not constitute a legally binding commercial privacy policy. Fenntrace is not currently a commercial service.
What data is collected
When you use Fenntrace, the only personal information involved in the check is the email address you enter.
No additional personal information is collected, requested, or transmitted during the check process.
How data is used
The email address is used exclusively to query the configured exposure data source (currently the Fenntrace Demo Source) for matching breach records.
The email address is not used for marketing, profiling, analytics, or any purpose beyond the exposure check.
Data storage
This prototype does not persist your email address or investigation results in any form of browser storage, including localStorage, sessionStorage, IndexedDB, or cookies.
All data exists only in the active browser session memory and is cleared when the page is refreshed or closed. The “Erase this check” action immediately removes all investigation data from session memory.
Data sources
The current prototype queries the Fenntrace Demo Source, which contains simulated breach records for demonstration purposes.
Results reflect only the configured source and do not represent complete internet-wide exposure detection.
Third-party sharing
No personal data is shared with, sold to, or transmitted to any third party as part of this prototype.
Limitations
The absence of records in a Fenntrace check does not guarantee that an email address has never appeared in a data breach. This prototype queries a single source and should not be relied upon as comprehensive breach detection.
Contact
For questions about this prototype, please contact the Fenntrace team through the hackathon submission.