Privacy

Account data

We store your email address, selected language, a password hash and a recovery-code hash. Passwords and recovery codes are not stored in readable form. Session cookies keep your account signed in.

What becomes public

Anyone with the filter URL can read its domains. Do not publish personal or confidential information, or domains whose disclosure could reveal sensitive information about you. Permanence applies to the public list and added entries.

DNS integrations

API keys are encrypted at rest and used on the server to query the selected provider. Reports may be cached to reduce API requests. Private reports can show queried domains; public summaries include only totals and charts after explicit authorization.

Payments and infrastructure

Stripe processes the payment and receives the information needed for checkout, including your account email. LockFilter stores transaction identifiers, amount, currency and confirmation, not card numbers. Cloudflare provides hosting and storage infrastructure. Each provider has its own data practices.

Security and retention

Sessions expire within seven days. Attempt counters use cryptographically derived identifiers with expiry. Disconnecting a provider removes its integration credentials and cached reports; public report links can be revoked. Records required for account and payment operations are kept separately from the public list.

Browsing

This beta does not use advertising tools or audience analytics cookies. Infrastructure may produce operational logs. Contribution and report URLs are excluded from the sitemap. Exclusion from indexing does not make a public URL confidential.