Last updated: 26 September 2026
ThreatScout is operated by FindingThreat. This policy explains what we collect when you use findingthreat.com and how we handle it. We keep data collection deliberately narrow: we do not require an account to run a scan, and we do not sell personal data to third parties.
When you unlock a report, we store the email address you provide together with the IP address or domain you looked up and the resulting risk score. We use that record to send you the report you requested, to follow up about your scan, and to improve the accuracy of our scoring. You can ask us to delete it at any time and we will do so promptly.
Report content is generated from public and commercial threat-intelligence sources. We log aggregate usage — page views, scan counts and error events — to operate and secure the service. Standard server logs may record your IP address and browser user agent. We use cookies and similar storage for session handling and, where enabled, for advertising measurement.
Advertising on this site is delivered by Google AdSense, which may set its own cookies and use interest-based signals under its own policies. We do not pass your email address or the targets you look up to advertising partners. Payment for paid plans is processed by PayPal; we never see or store your card details.
FindingThreat participates in affiliate programs. Some links in our reports (including /go/surfshark and other /go/ links) are affiliate links, and we may earn a commission when you purchase through them. This supports our free scans at no extra cost to you. Affiliate relationships do not influence our threat assessments.
Data is stored on infrastructure operated by our hosting providers and may be processed outside your country of residence. We retain lead and purchase records for as long as needed for billing, legal and support purposes. To exercise access, correction or deletion rights, contact us through the contact page at findingthreat@gmail.com.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email us at findingthreat@gmail.com and we will respond without undue delay and in any case within 30 days. We do not require an account to run a scan, we never sell your personal data, and we will delete your lead and purchase records on request once legal retention obligations are met.