Privacy
Effective: 24 August 2026
Release 1 forensic and message tools process files and text in your browser. Source files are not uploaded to ValidatesOnline servers for those tools.
How the local claim is defined: the selected source content is read by browser JavaScript, Web Workers or browser media APIs. A WebAssembly label is shown only if a specific analyzer genuinely uses it. Interface assets or optional provider checks are not described as source-file uploads.
- Local tools show a privacy badge: processing stays in your browser.
- Password breach checks use Have I Been Pwned k-anonymity — only a 5-character hash prefix is sent, never the password.
- Server checks such as public DNS transmit only the identifier needed for that check and may create ordinary security and access logs.
- We do not sell personal analysis content or use it to sell positive security verdicts.
- Essential storage may preserve interface state on your device. ValidatesOnline does not currently load non-essential advertising or measurement tags.
- Before advertising is activated, an applicable consent-management flow and clear cookie controls will be enabled. Ad partners may then process device, cookie, IP, and interaction data under their own policies.
- Locally generated reports remain on your device unless you choose to download, share, or submit them elsewhere.
Requests and contact
For access, correction, deletion, objection, or privacy questions, email support@validatesonline.com. We may need enough information to locate relevant server records and verify the request.