This Privacy Policy explains how Make Me Invisible (“we”, “us”, “our”), which operates makemeinvisible.com (the “Service”), handles personal information. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). By using the Service you agree to this policy.
The short version: you scan your own email; we check it against public breach databases and show you a plain-English report. We never look up anyone but you, we never sell your data, and we never store or resell breach data.
1. Information we collect
The email address you submit for a scan, so we can check it and (if you pay) email your report.
Passwords you choose to test in the optional password checker — see section 3; we never receive your actual password.
Payment information when you buy the paid report. Payments are processed by Stripe; we do not see or store your full card details. We receive a confirmation that payment succeeded and the email associated with the order.
Basic technical data (such as IP address and request metadata) handled by our hosting provider for security and to operate the site.
Scan records. We keep a record of the email you scanned, your exposure score and breach count, and when the scan happened, so we can understand usage and improve the Service. We do not store the underlying breach data itself.
On-site activity. We record anonymous interaction events (pages and sections viewed, scroll depth, buttons clicked) to understand how the Service is used and improve it. This records actions only — never the email or password you type.
Done-for-you removals: if you purchase the done-for-you service, we send opt-out requests containing your email address to the data brokers listed in your portal, acting as your authorised agent, and store the status of each request. Monitoring data (subscribers). If you subscribe to monitoring, we re-check your email on a recurring basis and store your exposure score over time so we can alert you to new exposure and show your history.
2. How we use your information
To run your exposure scan and generate your report.
To take payment and deliver your paid report and removal kit by email.
To run recurring monitoring and send your weekly check + new-exposure alerts, if you subscribe.
To measure how the Service is used (anonymous activity analytics) so we can improve it.
To provide support and respond to your enquiries.
To protect, maintain and improve the Service and prevent misuse.
3. How the scan and password check work
When you run a scan, we query public breach data sources (including XposedOrNot) and may check for a public Gravatar profile associated with your email. The optional password checker uses a k-anonymity model: only a short, partial hash fragment of what you type ever leaves your browser, so we never see, transmit or store your actual password.
We use a Cloudflare Workers AI model to turn the technical results into a plain-English summary. We do not store, retain or resell the breach data we surface for you.
4. Who we share information with (service providers)
We share the minimum information needed with trusted providers who help us run the Service:
Cloudflare — website hosting, security, and the AI summary.
Stripe — payment processing (subject to Stripe’s own privacy policy).
Resend — delivery of your report email.
Breach-data sources (e.g. XposedOrNot, Have I Been Pwned’s Pwned Passwords range API) — to perform the lookup.
We do not sell, rent or trade your personal information to anyone. Some providers may process data outside Australia; we take reasonable steps to ensure they protect it.
5. Data retention
We keep personal information only as long as needed for the purposes above or as required by law (for example, payment records for tax purposes). You can ask us to delete information we hold about you (see section 7), subject to those legal requirements.
6. Security
We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your rights
You may request access to, or correction of, the personal information we hold about you by emailing support@makemeinvisible.com. If you have a privacy concern, contact us first and we will try to resolve it. You may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their personal information.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date above shows the current version, and continued use of the Service means you accept the updated policy.