Privacy Policy

1. Who we are

NortheastVault is a free breach-checking tool operated by the same Swiss sole proprietorship as SafeSignal (safesignal.ch):

NortheastVault
Operator (Inhaber): József András Ujvári
Solarstrasse 7, 8404 Winterthur, Switzerland
contact@northeastvault.com

We are the data controller for personal data processed through northeastvault.com under the Swiss nDSG and, where applicable, the EU GDPR.

2. What happens when you run a check

When you enter an email address into the breach checker, the following happens:

• The address is sent over an encrypted (HTTPS) connection to our lookup service, which runs on Cloudflare's global network.
• Our lookup service queries the HaveIBeenPwned (HIBP) breach database with that address. HIBP requires the full address to perform this type of lookup; HIBP's own privacy practices are described at haveibeenpwned.com.
• The results — a list of breaches the address appeared in, if any — are returned to your browser and displayed. They are not saved by us.

We do not maintain a database of checked email addresses. As with any web service, transient technical logs at our infrastructure provider may include request data for security purposes.

3. Technical data

Our site runs on Cloudflare's network, which automatically processes standard technical data (IP address, browser type, request metadata) for security and performance. This website also loads fonts from Google Fonts (Google LLC, USA), which involves transmitting your IP address to Google. We use no analytics tools, advertising cookies, or tracking pixels, and there are no user accounts.

4. International transfers

Our service providers — Cloudflare (USA, global network), HaveIBeenPwned (operated internationally), and Google Fonts (USA) — process data outside Switzerland. Transfers rely on the safeguards these providers offer in their published data-protection terms.

5. Legal basis (GDPR / Swiss nDSG)

When you run a check, we process the address you entered to perform the lookup you requested (Art. 6(1)(b) GDPR — performance of a requested service). Technical data is processed under legitimate interests (Art. 6(1)(f) GDPR) for security and performance. Please only check addresses that are your own or that you are authorised to check.

6. Your rights

You have rights under the Swiss nDSG and, where applicable, the GDPR, including access, correction, deletion, and portability. Since we do not keep a database of checked addresses, there is typically nothing stored about you to access or delete — but you can always ask: contact@northeastvault.com.

You may also lodge a complaint with the Swiss FDPIC at edoeb.admin.ch or, in the EEA, with your local supervisory authority.

7. Cookies

We set no cookies of our own and use no advertising or analytics cookies. Our infrastructure provider (Cloudflare) may set strictly necessary security cookies.

8. Children's privacy

NortheastVault is not directed at children under 16. Contact us at contact@northeastvault.com if you have concerns.

9. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.

10. Contact