What leaves your device.

Not signed in

Nothing about you or the page you are on.

Signed in, live lookups off

Your account email at sign-in. No page addresses.

Signed in, live lookups on

Page addresses in batches of up to 25, checked against reputation providers. Verdicts are cached; addresses are not stored with your identity.

Company seat

The above, plus protection counts for your devices and any page you choose to report. A reported address is kept 30 days, then only its hash.

Providers are listed on subprocessors. Deletion is described on retention.