Privacy
PlugLeak is operated by J. Almonte LLC. This page explains what we collect.
Scans
When you scan a URL we store the report (URL, findings, score, timestamp) so you can open it via its private link. Any secret found is masked (first 6 characters + ****) before storage; we never store full secrets. Your IP address is used briefly in memory for rate limiting and is not stored with the report.
If you enter your email we store it with the source (scan, waitlist or checkout), the scanned URL, timestamp and whether you purchased, and we may add it to our email list provider to send you your report link and product updates. You can unsubscribe any time or email hello@plugleak.com to be deleted.
Payments
Payments are processed by Stripe. We never see or store your card details.