Privacy Policy

This Privacy Policy explains how Make Me Invisible (“we”, “us”, “our”), which operates makemeinvisible.com (the “Service”), handles personal information. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). By using the Service you agree to this policy.

1. Information we collect

• The email address you submit for a scan, so we can check it and (if you pay) email your report.
• Passwords you choose to test in the optional password checker — see section 3; we never receive your actual password.
• Payment information when you buy the paid report. Payments are processed by Stripe; we do not see or store your full card details. We receive a confirmation that payment succeeded and the email associated with the order.
• Basic technical data (such as IP address and request metadata) handled by our hosting provider for security and to operate the site.

2. How we use your information

• To run your exposure scan and generate your report.
• To take payment and deliver your paid report and removal kit by email.
• To provide support and respond to your enquiries.
• To protect, maintain and improve the Service and prevent misuse.

3. How the scan and password check work

When you run a scan, we query public breach data sources (including XposedOrNot) and may check for a public Gravatar profile associated with your email. The optional password checker uses a k-anonymity model: only a short, partial hash fragment of what you type ever leaves your browser, so we never see, transmit or store your actual password.

We use a Cloudflare Workers AI model to turn the technical results into a plain-English summary. We do not store, retain or resell the breach data we surface for you.

4. Who we share information with (service providers)

We share the minimum information needed with trusted providers who help us run the Service:

• Cloudflare — website hosting, security, and the AI summary.
• Stripe — payment processing (subject to Stripe’s own privacy policy).
• Resend — delivery of your report email.
• Breach-data sources (e.g. XposedOrNot, Have I Been Pwned’s Pwned Passwords range API) — to perform the lookup.

We do not sell, rent or trade your personal information to anyone. Some providers may process data outside Australia; we take reasonable steps to ensure they protect it.

5. Data retention

We keep personal information only as long as needed for the purposes above or as required by law (for example, payment records for tax purposes). You can ask us to delete information we hold about you (see section 7), subject to those legal requirements.

6. Security

We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

You may request access to, or correction of, the personal information we hold about you by emailing support@makemeinvisible.com. If you have a privacy concern, contact us first and we will try to resolve it. You may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows the current version, and continued use of the Service means you accept the updated policy.

10. Contact

Questions about privacy? Email support@makemeinvisible.com.