IDProt.com

Privacy Policy

Last updated: October 10, 2026

This Privacy Policy explains how Mighty Moo Media LLC, doing business as IDProt ("IDProt", "we", "us", "our"), collects, uses, discloses, and protects personal information when you visit idprot.com, run a breach scan, purchase a subscription, or use the IDProt app and related services (together, the "Service"). By using the Service you acknowledge this Policy. The Service is offered only to residents of the United States.

1. Information We Collect

Information you give us:

  • Contact details: email address, and if you provide them, your name and phone number.
  • Identity details for removal requests: full legal name, other or former names, street address, city, state, ZIP code, and date of birth or birth year — collected only if you choose to use data-broker removal features.
  • Billing details: name, ZIP code, and payment card details entered into our payment processor, Stripe. We never receive or store your full card number or CVC.
  • Communications: messages you send to support, through the help chat, or through cancellation and refund forms.
  • Consents: records of your agreement to our Terms, this Policy, marketing emails, and authorized-agent authorizations, including time, page, and browser details.

Information we obtain from third-party sources:

  • Breach and exposure data: when you scan an email address, we query public breach-intelligence services (such as XposedOrNot, LeakCheck, and ProxyNova) and receive the names of breaches, breach dates, and the categories of data exposed. We do not retrieve or display leaked passwords.
  • Payment status: from Stripe, such as whether a payment succeeded, subscription status, and the last four digits and brand of your card.

Information collected automatically:

  • Device and usage data: IP address, browser type, device type, operating system, pages viewed, referring URL, and timestamps.
  • Cookies, pixels, and local storage: see our Cookie Policy for details.

2. How We Use Information

  • To run breach scans and show you where your information appears to be exposed.
  • To provide continuous monitoring and send alerts when new exposures are detected.
  • To provide personalized security guidance and action plans.
  • To prepare, and where you authorize it, submit opt-out and deletion requests to data brokers on your behalf.
  • To process payments, manage your subscription, send receipts and billing notices, and handle cancellations and refunds.
  • To verify your identity and give you secure access to the app, including one-time sign-in codes.
  • To respond to support requests.
  • To send marketing emails if you opted in (you can unsubscribe at any time).
  • To measure and improve our advertising and Service, prevent fraud and abuse, enforce our Terms, and comply with law.

3. How We Disclose Information

We do not sell your personal information for money. We disclose information only as follows:

  • Service providers that process data on our behalf under contract: hosting and database (Supabase / Cloudflare), payments (Stripe), email delivery, and internal team notifications.
  • Breach-intelligence providers, which receive the email address you ask us to scan so they can return results.
  • Data brokers and people-search sites, only when you authorize us to send removal requests, and only the details needed for them to locate and delete your records.
  • Advertising partners such as Meta (Facebook/Instagram), which receive pixel and conversion events (for example, page views and purchases, which may include hashed email) to measure ad performance. Under some state laws this may be considered "sharing" for cross-context behavioral advertising — see Section 7 for how to opt out.
  • Legal and safety: when required by law, subpoena, or court order, or to protect the rights, property, or safety of IDProt, our users, or others.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

4. Data Retention

  • Account, subscription, and monitoring data: while your subscription is active, and up to 24 months after it ends unless you ask us to delete it sooner.
  • Billing and transaction records: as long as required for tax, accounting, and chargeback purposes (generally up to 7 years).
  • Consent and authorization records: as long as needed to prove consent, typically 5 years.
  • Scan results for non-customers: up to 12 months.

5. Security

We use encryption in transit (HTTPS), access controls, restricted server-only storage for sensitive identity details, hashed verification codes, and payment tokenization through a PCI-DSS compliant processor. No system is 100% secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as required by law.

6. Your Choices

  • Marketing emails: click "unsubscribe" in any marketing email. Transactional emails (receipts, alerts, billing notices) will still be sent while you have an account.
  • Cookies and tracking: manage through browser settings or a Global Privacy Control signal, as described in our Cookie Policy.
  • Subscription: cancel any time from your account page or our cancellation page.

7. Your State Privacy Rights

Depending on where you live (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws), you may have the right to:

  • Know and access the personal information we hold about you;
  • Correct inaccurate personal information;
  • Delete personal information;
  • Receive a portable copy of your information;
  • Opt out of the sale or sharing of personal information and targeted advertising;
  • Limit use of sensitive personal information (we use it only to provide the Service you request);
  • Not be discriminated against for exercising these rights.

Do Not Sell or Share / Global Privacy Control: our site honors the Global Privacy Control (GPC) browser signal. When your browser sends GPC, our advertising pixel does not load. You can also opt out by emailing us with the subject "Do Not Sell or Share".

To exercise any right, email idprothelp@gmail.com from the email address associated with your account. We will verify your request and respond within 45 days (extendable as permitted by law). You may use an authorized agent with written permission. If we deny your request, you may appeal by replying to our decision with the subject "Appeal"; if you remain unsatisfied, you may contact your state Attorney General.

California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.

8. Categories of Personal Information (California notice)

  • Identifiers (name, email, IP address) — collected; disclosed to service providers; shared with advertising partners.
  • Customer records (address, phone, partial payment info) — collected; disclosed to service providers and, with authorization, data brokers.
  • Commercial information (purchases, subscription history) — collected; disclosed to service providers.
  • Internet activity (pages viewed, interactions) — collected; shared with advertising partners.
  • Sensitive information (date of birth when provided) — used only to provide removal services.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. We will post the revised version here with a new "Last updated" date and, for material changes, notify subscribers by email.

11. Contact Us

Mighty Moo Media LLC (IDProt)
251 Little Falls Drive, Wilmington, DE 19808-1674
Phone: 443-926-1834
Email: idprothelp@gmail.com