Your privacy matters to us.

In this Privacy Policy:

• Data means any information that is submitted to or collected by Holehe OSINT through the Website.
• Cookies are small text files placed on your device by your browser when you visit the Website.
• Data Protection Laws means any applicable law relating to the processing of personal data, including the GDPR.
• GDPR means the General Data Protection Regulation (EU) 2016/679.
• Holehe OSINT, we or us means the operator of this Website.
• User or you means any person accessing the Website who is not employed by us or acting on our behalf.
• Website means the Holehe OSINT website and its subdomains.

This Privacy Policy applies only to the actions of Holehe OSINT and Users with respect to the Website. It does not extend to third-party websites or services that may be linked from search results or other pages. For those services, please review their respective privacy policies.

We may collect the following Data from you:

• Search queries: We do not log, store, or share the usernames, email addresses, phone numbers, IP addresses or other identifiers you enter into our search tools. Each query is forwarded directly to upstream public endpoints and results are returned to your browser transiently.
• IP address (automatically collected).
• Web browser type and version (automatically collected).
• Operating system (automatically collected).
• Referral URLs and activity on the Website, such as pages visited and features used (automatically collected).
• Recent searches are stored in your browser's local storage only so they can be shown on the home page. This data stays on your device and is never sent to our servers.

We collect Data in two ways:

• Data you give us: if you contact us via the Website or any other channel, you may provide personal information such as your name and email address.
• Data collected automatically: when you visit the Website, we automatically collect technical information about your visit and device. We also store recent searches locally in your browser via local storage.

We use the Data we collect to:

• Provide and maintain the Website and search functionality.
• Improve the Website, fix bugs, and develop new features.
• Monitor and enforce rate limits to keep the service stable and fair.
• Prevent abuse, fraud, and security incidents.
• Respond to your enquiries and support requests.

We do not use your search queries for profiling, advertising, or analytics.

We do not sell your personal data. We only share data in limited circumstances:

• Service providers: we may use hosting, CDN, and analytics providers to operate the Website. These providers only process data on our behalf and are bound by appropriate confidentiality and security obligations.
• Third-party search endpoints: your search queries are sent to public third-party endpoints to retrieve results. We do not control those endpoints, so please review their privacy policies.
• Legal requirements: we may disclose data if required to do so by law or in response to a valid legal request.

We use appropriate technical and organisational measures to protect the Data we hold, including:

• HTTPS encryption for all traffic between your browser and our servers.
• Input validation, rate limiting, and CSRF protection.
• Regular security updates and vulnerability monitoring.
• Zero-storage design for search queries, so the queries you run are not kept on our servers.

We do not retain search queries on our servers. Server logs containing technical information (such as IP addresses) may be retained for a limited period, typically no longer than 30 days, for security and operational purposes. Data stored in your browser's local storage remains on your device until you clear it.

Depending on your jurisdiction and applicable Data Protection Laws, you may have the following rights:

• Right to access the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure of your personal data.
• Right to restrict processing of your data.
• Right to data portability.
• Right to object to processing based on legitimate interests.

To exercise any of these rights, please contact us using the details at the end of this policy.

We use a small number of cookies and similar technologies:

• Essential cookies: a session cookie is used for CSRF protection. Without this cookie, search and form submissions may not work securely.
• Local storage: recent searches are saved in your browser's local storage for convenience. You can clear this at any time through your browser settings.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Website.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. Your continued use of the Website after changes are posted constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us.