Privacy policy

This policy describes how we process personal data, in accordance with Brazil’s LGPD (Law 13,709/2018).

Data collected

• Account: email, username, display name, password hash, terms acceptance date.
• Security: access logs and login attempts (hashed identifier), IP for a limited time.
• Community: comments, suggestions and reports you submit.

Purposes

Authentication, abuse prevention, moderation, delivery of the alerts you configure and service operation. We do not sell data.

Alerts and IOC Radar

• Alert rules are tied to your account; webhook URLs (Slack, Discord, Teams) are stored encrypted and deleted with the rule or the account.
• IOC Radar keeps only a hash of the looked-up indicator and the result, for up to 6 hours (cache).

Cookies and advertising

We only use essential cookies (session and CSRF protection). We do not use advertising trackers.

Retention

Login attempts: 30 days. Unverified accounts: 30 days. Account data: while active; on deletion, personal data is anonymized.

Your rights

On My account you can download your data (JSON) and delete your account. For other requests, use the channels listed on About.