Your identity stays
out of marketing.

This test runs separately from the Terrabase marketing site and core application. It does not load advertising pixels, browser analytics, session replay or core sign-in credentials.

What we process

We use your email to send a one-time verification code through Amazon SES. Only after you consent to a one-time check and successfully verify ownership do we send your email, over TLS from our server, to XposedOrNot for a public breach-index lookup. We do not send it to the marketing site or enroll you in marketing, monitoring or family sharing.

Expiry and storage

The service stores keyed hashes of the email, code and random access tokens, with ten-minute logical expiry. It never stores the raw email, code or report in its database. Expired records cannot authorize a lookup; database TTL deletion happens asynchronously. Abuse-control hashes and counters expire within two quota windows, up to 48 hours. The email-delivery provider processes your address and verification message to deliver it.

The report stays in this browser page’s memory. Reload, cancellation or leaving clears the page. Cancellation revokes known challenge/report tokens; an already-authorized request may finish at the provider. We do not log request bodies, query addresses, tokens or breach results. Infrastructure retains operational request metadata for troubleshooting; application logs are retained for seven days.

Aggregate service measurement

Our server counts check starts, code sends, verified emails, lookup starts, completed reports, report views and app handoff clicks in five-minute buckets. We send only these aggregate stage counts to PostHog. The export contains no email, IP address, code, access token, individual user or session identifier, report contents, exposure outcome or campaign identifier. These counts measure service stages, not individual journeys or completed Terrabase registrations. Aggregate counters expire from our service database after two days.

Cloudflare security check

Cloudflare Turnstile processes the browser signals and IP address needed for bot protection. We verify its result on the server and apply strict sending, verification and lookup quotas. See the Turnstile privacy addendum.

Coverage and choices

The public index can omit private, sensitive, excluded and unreported records. No known matches is not a safety guarantee. Phone, current-device and comprehensive stealer-log checks are not supported. You can cancel at any time. Google sign-in is available separately in the core Terrabase app; this test uses email ownership verification and does not create an account.

For data-handling questions, use the contact details in the Terrabase privacy policy.