Summary
Esrok monitors email addresses for known breach matches. We collect only the data needed to run your account, send alerts, process billing, and keep the service secure. We do not sell personal information.
Account data
- Your account email address and sign-in session details.
- The email addresses you choose to monitor.
- Verification status, check timestamps, and plan information.
- Support messages you send to us.
Breach monitoring data
When Esrok checks a protected email, we store positive matches only. That means we save breach records only when your verified monitored email appears in a supported breach source. We do not store full breach dumps or unrelated records that do not match a customer email.
What we do not store
- We do not store passwords from breach data.
- We do not store raw breach databases.
- We do not store non-customer breach records after a check.
- We do not sell customer emails, monitored emails, or breach results.
Email and billing providers
Esrok uses email infrastructure to send sign-in links, verification messages, breach alerts, and weekly summaries. Esrok uses Stripe for checkout, subscriptions, invoices, payment method management, and cancellation flows. We do not store full card numbers.
Cookies, analytics, and advertising
Esrok uses secure session cookies to keep you signed in when you choose that option. We also use Google Analytics to understand aggregate site usage and Google AdSense on selected Normalize Volume documentation pages to fund the free extension. Google and its partners may use cookies or similar technologies to measure visits, prevent fraud, and personalize or measure advertising, depending on your settings and applicable consent choices.
You can learn how Google uses information from sites that use its services on Google's partner sites policy page. Browser controls and Google's advertising settings can be used to manage cookies and ad personalization.
You can sign out from the Esrok dashboard at any time. Where required, a consent message will be shown before non-essential advertising or analytics storage is used.
Your choices
You can remove a monitored email from the dashboard, subject to the one-change-per-month abuse prevention rule after verification. You may request account deletion or data access by contacting us.
Retention
We keep account, billing, notification, and breach-match records as long as needed to provide the service, comply with legal obligations, prevent abuse, and support customer requests. If you cancel, we may retain limited records for security, tax, fraud-prevention, and legal reasons.
Important limitation
No breach monitoring service can detect every breach. Esrok shows known matches from configured data providers and private ingestion sources, not a complete history of every possible leak on the internet.
Contact
Questions? Email michael@esrok.com.