Privacy

OSINT Lab takes privacy seriously — for its users and for the public targets its tools observe.

For users

• We collect the minimum needed to operate the service: an account email, a password hash, and the runs you have explicitly triggered.
• We do not sell data. We do not run third-party advertising trackers.
• You can delete your account and your run history at any time.

For the public sites you inspect

• We only query publicly published signals: DNS, public HTTP responses, robots.txt, sitemaps, HTML metadata.
• We do not attempt to bypass access controls, brute-force paths, or send credentials.
• Every tool has a bounded request budget and a realistic User-Agent.

Legal

Detailed legal terms and cookie usage are documented separately. For questions or requests, see the Contact page.