Privacy
Porchlight watches your family's email addresses for data breaches and says in plain language what turned up. That means we hold information about someone who is usually not the person paying, so the short version is this: we check an address only after its owner has said yes, and they can stop us at any time without asking anyone's permission.
What we collect
- About the person paying: the email address on your account, the family name you choose, your first name, and optionally a phone number so another family member's screen can show a button that calls you.
- About the person being protected: their first and last name, optionally a phone number, and the email addresses you ask us to watch.
- What we find: the name and date of any known breach an address appears in, and the categories of data that breach exposed.
- A record of consent: when an address was added, when it was contacted, when its owner agreed or refused, and when anyone stopped monitoring. Email addresses in this record are stored masked.
We do not collect financial account data, we do not monitor credit, and we never see your card number — payments go directly to Stripe.
Who we share it with
- Have I Been Pwned receives the email addresses we check. This is the only place an address is sent, and it happens only after its owner has confirmed.
- Resend delivers our email.
- Stripe handles payment. We never receive card details.
- Supabase hosts our database and sign-in.
We do not sell personal information, and we do not use it for advertising.
How consent works
There are exactly two ways an address becomes one we check.
- The owner confirms it. We email the address itself with a link. Nothing is checked until someone opens it and agrees.
- A family member states that the owner agreed in person. We still email the address to say so, and that message still carries a link to stop.
Every message we send about an address contains a link that stops monitoring, and that link never expires. It needs no account and no password. Time limits exist so that an old link cannot grant permission; they must never stop someone withdrawing it.
Breaches we do not report to the family
Have I Been Pwned marks some breaches sensitive — dating, adult, and specific-community sites. We never show these to the family member who manages the account, in any form, including in counts and in the weekly email. They are shown only to the person whose address it is, and only if they confirmed that address themselves and can sign in.
Where neither is true, we store nothing about that finding at all — only a one-way hash, so that we remember not to look again. We are telling you this before you pay rather than after, because it means the alert count you see can be lower than what we found, and you should know that going in.
Keeping and deleting
Stopping monitoring takes effect immediately. Removing an address removes the alerts we found for it. When something is deleted we keep a receipt recording that a deletion happened and how many records it covered — the receipt contains no names and no addresses.
To delete an account and everything in it, write to hello@porchlightsecurity.org.
Children
Porchlight is for adults. It is not intended for anyone under 18.
Contact
Last updated 16 September 2026.