Privacy Policy — BellCrier

Operated by Goal Prevail LLC (Delaware, USA)

Last updated: 24 September 2026
Effective date: 24 September 2026

1. Who we are

BellCrier (the “Service“) is a data‑breach monitoring and notification service operated by Goal Prevail LLC, a limited liability company registered in the State of Delaware, United States (“Goal Prevail,” “we,” “us,” or “our“), available at https://bellcrier.com and related subdomains (the “Site“).

For any privacy question or request, use our contact form (topic “Privacy or data request”), email [email protected], or write to Goal Prevail LLC, 254 Chapman Rd, Ste 208, Newark, Delaware 19702, USA.

For the purposes of the EU and UK General Data Protection Regulation (GDPR), Goal Prevail LLC is the data controller for the personal data described in this Policy. Payments are handled by Freemius, our Merchant of Record, which acts as an independent controller for the payment data it collects (see Section 3.2).

2. The one thing to understand first — our role

We are not a data broker, and we did not breach, hack, or take anyone’s data.

Our Service checks whether an email address already appears in data breaches that third parties suffered and that are already circulating on the internet. That breach information exists independently of us, was exposed by the companies that were breached, and is often in the hands of bad actors before you hear about it. We are an early‑warning system — the messenger, not the source.

We do not:

create, compile, own, or sell breach databases;
hack, intrude into, or gain unauthorized access to any account or system;
run a public breach search engine. Our free check on the homepage shows only a limited preview: the number of breaches found and up to three site names, never breach contents, and never the names of sensitive sites (for example adult, dating, health, religious or political sites). Full results are shown only inside the account that added the address, only after the address has been verified through the link we send to it, and only while that account has an active trial, subscription, or complimentary access;
store full, unmasked breach contents on our website;
use your data for advertising, profiling, or resale.

3. The information we collect

3.1 Information you give us

Account & sign‑in. Your email address. We use passwordless “magic‑link” sign‑in, so customers do not create or give us a password. (For technical reasons WordPress stores a randomly generated, hashed password that you never use.)
Monitored email addresses. The email address(es) you ask us to monitor. You must verify ownership or control of each address (by clicking a confirmation link we email to it) before any breach results for it become visible. If you add an address that belongs to someone else (for example a family member, with their agreement), we process that address in the same way and send it our verification email. That email shows the owner the email address of the BellCrier account that asked, so they know who would see the results, and nothing is monitored unless they confirm.
Profile (optional). Your first and last name, if you choose to give them.
Contact form. Your name (optional), email address, the topic you choose, your message, and technical details of the request (IP address, page, time). The form is protected by Cloudflare Turnstile (see Section 9.1).
Optional notification channels. If you connect a messaging channel (Telegram, Discord, Slack, or Matrix), the identifier needed to send you a notification “ping.” We never send breach details over these channels — only a prompt to sign in.

3.2 Payment information (handled by Freemius)

We use Freemius as our Merchant of Record. When you subscribe, your payment details (card or PayPal, billing address, tax ID) are collected and processed by Freemius, not by us. We never receive or store your full card number. From Freemius we receive billing information such as subscription status, plan and license quantity, billing cycle, amounts, transaction and subscription IDs, and the country associated with the payment. Freemius handles payment data under its own privacy policy.

3.3 Breach data obtained from third‑party providers

To provide the Service, our scanning system sends each email address you ask us to monitor to one or more third‑party breach‑data providers and receives back any matching records. Depending on the breach, a record may include the email address, a username, a masked password or password hash, and other exposed fields (for example IP address, name, phone number, address, or date of birth).

What we keep and how we mask it:

Sensitive values are masked (for example pa******) before they are written to the website database. The website stores only the masked version.
While a breach is active in your account, the masked values stay visible in your dashboard so you can recognize what to fix.
When you mark a breach as “resolved,” we erase the masked values for that record and keep only the labels (for example “password and email were exposed”), plus the source, date, and your resolved status.
We do not keep raw, unmasked provider responses on the website. Raw results are processed briefly by our scanning process, which runs separately from the public website with its own credentials, and are discarded after masking.

3.4 Free tools (no account required)

Password generator. Runs entirely in your browser using its built‑in cryptographic random generator. Generated passwords are never sent to us.
Password checker. Uses k‑anonymity: your password is hashed (SHA‑1) in your browser, and only the first 5 characters of that hash are sent to the Pwned Passwords range service run by Have I Been Pwned, or to a copy of the same dataset hosted for BellCrier. Your actual password never leaves your device. To prevent abuse, we apply a per‑IP rate limit to this tool.
Browser fingerprint tool. Runs entirely in your browser and shows what websites can learn about your device. Nothing is sent to us. Only if you turn on “Look up my IP”, your browser sends your public IP address to a third‑party geolocation service (ipapi.co, with ipwho.is as a fallback) to show your approximate location and provider, and contacts Google’s STUN server to test whether WebRTC reveals your IP. We do not receive or store these lookups.

3.5 Free email check (homepage) and event check

Homepage free check. When you run a free check, we send the email address you entered to our breach‑data providers and show you the limited preview described in Section 2. We store the address as a “lead” together with the number of breaches found, how many times it was checked, the page it came from, the time, and a shortened IP address (the last part is removed). We use this to show you results, to enforce free‑check limits and prevent abuse, and to invite you to start a trial. We do not store breach contents for free checks.
Follow‑up emails. We may send a small number of follow‑up emails about the results of a free check. Every one includes an unsubscribe link, and once you unsubscribe we will not send you offers again.
Only check addresses you are allowed to check. The free check is for your own email address, or one you are authorized to check. If you own an address and do not want it to be checkable at all, contact us and we will block it from free checks.
Event/booth check. Where offered, this emails the results to the address entered (through our email provider) and records the address as a lead. It does not store breach data.

3.6 Information we collect automatically

Log and security data. IP address, browser/user agent, request times, and security events (for example sign‑in attempts, rate‑limit triggers, verification events). Rate limits use hashed IP addresses where possible.
Consent records. When you tick an agreement box (for example at checkout or before a free check), or close your account, we record what you agreed to or asked for, the versions of our Terms and this Policy in force, the page, time, IP address and browser, as proof.
Email delivery records. We keep a copy of the emails we send, for delivery troubleshooting.
Cookies and similar technologies. See Section 8.

Apart from the tax forms that affiliates give us (Section 3.7), we do not intentionally collect government IDs, financial account numbers, health data, biometric data, or data about children (see Section 11). Sensitive fields that appear inside third‑party breach records are masked and handled as described in Section 3.3.

3.7 Affiliates

If you join our affiliate program, we process your name, email address, website or social channels, PayPal (or other payout) details, and your IRS tax form (W‑9 or W‑8BEN/W‑8BEN‑E, which includes a tax ID number), together with your referral statistics from Freemius (clicks, sign‑ups, and commissions). We use this to run the program, pay your commissions, prevent fraud, and meet tax law. Tax forms are kept securely with access limited to the people who handle payouts. Affiliates never receive the personal data of the customers they refer.

4. How we use information

We use personal data to:

create and operate your account and sign you in by magic link;
verify that you control the email addresses you monitor;
query breach‑data providers and show you masked results, history, reset links, and guidance;
send breach alerts, verification emails, monthly reports, and important service, billing and security notices, and (if you opt in) channel “pings”;
run the free tools and free check, and send limited follow‑up emails about free‑check results (with an unsubscribe link);
process trials and subscriptions through Freemius and apply your plan’s monitored‑email allowance;
secure the Service: prevent fraud and abuse, rate‑limit, run bot checks (Cloudflare Turnstile), and investigate incidents;
answer contact‑form messages and support requests;
understand aggregate, non‑identifying usage to improve the Service;
keep records that prove consent, and comply with the law and enforce our Terms.

We do not sell your personal data, share it for cross‑context behavioral advertising, use breach data to build advertising profiles, or use your personal data or breach results to train artificial‑intelligence models.

5. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on:

Contract (Art. 6(1)(b)) — to create your account, verify your addresses, monitor for breaches, and send alerts and support replies.
Legitimate interests (Art. 6(1)(f)) — to run the free check you request, keep the Service secure, prevent fraud and abuse, rate‑limit, keep consent records, reply to messages, and improve the Service. We balance these interests against your rights.
Consent (Art. 6(1)(a)) — for the optional IP lookup in the fingerprint tool, optional messaging‑channel notifications, and marketing emails where the law requires consent. You can withdraw consent at any time.
Legal obligation (Art. 6(1)(c)) — tax, accounting (including affiliate tax forms and payout records), and lawful requests.

You may object to processing based on legitimate interests (Section 12).

6. How long we keep it

Active customers’ monitoring data (monitored emails and masked breach history) — kept while your account is active. Resolved records keep only labels (values are erased on resolve).
Cancelled or inactive accounts — breach records and additional monitored emails are deleted automatically about 12 months after your subscription or trial ends. Your core account email may remain until the account is deleted.
Free‑check leads that do not become customers — deleted about 12 months after the last check.
Contact‑form messages — kept for up to 24 months, then deleted.
Copies of emails we send — kept for 30 days.
Consent records — kept for about 6 years as proof of agreement, then deleted.
Unsubscribe and “do not check” lists — kept for as long as needed to honor your choice (stored as one‑way hashes, not readable addresses).
Security and server logs — kept for a limited period for security and troubleshooting, then deleted or anonymized.
Payment and tax records — kept by Freemius under its own policies and applicable law.
Affiliate records — kept while you are an affiliate; tax forms and payout records are then kept for as long as tax law requires (generally at least 4 years after your last payout).
Backups — deleted data can remain in our secured server backups for up to 30 days, until those backups are replaced.

You can have your monitoring data deleted by closing your account (Section 12).

7. International data transfers

We are based in the United States, and our providers may process data in the US and other countries. Where we transfer personal data from the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) and/or adequacy decisions, together with technical measures such as encryption, minimization, and masking. You can ask us about these safeguards using the contact details in Section 1.

8. Cookies and similar technologies

We use only what the Service needs to work and stay secure:

Sign‑in cookies — set by WordPress when you sign in, to keep you signed in and protect forms.
Security cookies — set by Cloudflare (for example for bot protection and the Turnstile check).
Checkout — Freemius may set its own cookies inside its checkout window.
Affiliate referrals — if you reach us through an affiliate’s link, Freemius (which runs our affiliate tracking) places a referral cookie for up to 60 days so that the affiliate can be credited if you subscribe. It records the referral only, and the affiliate never receives your personal data.
Browser storage — your browser remembers small preferences, such as the last dashboard tab you opened or that you closed a tip banner. These stay on your device.

Apart from that referral cookie, we do not use analytics, advertising, or cross‑site tracking cookies or pixels, and we do not allow third parties to collect information about your browsing over time and across websites through our Site. Do Not Track: because we do not track you across websites, we treat all visitors the same way whether or not their browser sends a Do Not Track or Global Privacy Control signal. If that ever changes, we will update this Policy and ask for your consent first where the law requires it. You can control cookies in your browser; blocking the sign‑in or security cookies may stop the Service from working.

9. Who we share information with

We do not sell or rent personal data. We share it only as follows.

9.1 Service providers

We use providers that process data on our behalf under contracts that require appropriate protection:

Provider	Purpose	Data involved
Freemius (Merchant of Record)	Payments, tax, subscriptions and billing support; affiliate referral tracking	Email, billing data, subscription details
PayPal	Paying affiliate commissions	The affiliate’s name, PayPal email, and payout amount
Hosting provider	Website, database and scanning process hosting	Account data, masked breach data, logs
Breach‑data providers	Checking whether an email appears in known breaches	The email address being checked
Have I Been Pwned	Leaked‑password range checks; public breach list; one of our breach sources	A 5‑character hash prefix (password checker); the email address being checked (email checks)
Microsoft (primary) and Twilio SendGrid (backup, event results)	Sending sign‑in, verification, alert, report and support emails	Recipient email address and message content
Cloudflare	Content delivery, DDoS protection, Turnstile bot checks	IP address, request details, challenge token
ipapi.co / ipwho.is and Google (STUN)	Fingerprint tool IP lookup, only if you turn it on	Your public IP address (sent from your browser, not received by us)
Telegram / Discord / Slack / Matrix	Optional notification pings, only if you connect them	The channel identifier you give us

Some breach sources require us to credit them where their results are shown; we display that credit next to the results. We never give your identity to a provider for attribution.

9.2 Legal and safety

We may disclose information if we believe in good faith that it is necessary to comply with the law, a regulation, legal process, or a lawful government request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Goal Prevail, our users, or the public. Where lawful and feasible, we will try to narrow overbroad requests and tell you about them.

9.3 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. The recipient will be bound by privacy commitments at least as protective as this Policy, and we will tell you about any material change.

9.4 What we never do

We never sell your personal data, share breach results with anyone other than the account holder who added and verified the address (and, for the limited free‑check preview, the person who ran it), provide bulk data access, or operate as a data broker.

10. Security

We use administrative, technical, and physical safeguards suited to the data, including: TLS encryption in transit; data minimization and masking (we store masked values only and erase them on resolve); a scanning process that runs outside the public web folder with its own credentials; passwordless magic‑link sign‑in with single‑use, expiring, hashed tokens; signed and verified server‑to‑server requests; rate limits and bot checks; and access controls. No system is perfectly secure. If a breach of our systems is likely to create a risk to you, we will notify you and the authorities as the law requires. Because we store only masked data, a compromise of our website would expose little sensitive information. We will never ask you for a password or payment details by email; if you receive a message like that claiming to be from BellCrier, do not reply and report it to us.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a minor has given us data, contact us and we will delete it.

12. Your rights and choices

Depending on where you live, you may have some or all of these rights: access, correction, deletion, restriction, portability, objection (including to processing based on legitimate interests and to marketing), and withdrawal of consent. You can also complain to a data protection authority.

EEA, UK and Switzerland (GDPR / UK GDPR): the rights above apply. You may complain to your local data protection authority.
California (CCPA/CPRA): you may request to know, delete, and correct your personal information, and you have the right not to be discriminated against for using these rights. We do not “sell” or “share” personal information for cross‑context behavioral advertising, and we do not use sensitive personal information for purposes that require an opt‑out, so there is nothing to opt out of. If that ever changes, we will honor Global Privacy Control (GPC) signals as an opt‑out.
Other US states and countries (for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon; Canada; Brazil; Australia): we honor equivalent rights where they apply. If we decline your request, you can appeal by replying to our decision, and we will answer within the time the law requires.
Marketing: use the unsubscribe link in any promotional email. Account, security and billing emails are part of the Service and continue while you have an account.
Free check: if you own an email address and want it blocked from free checks, contact us.
Lost access or a death in the family: if you can no longer get into your account email, or an account holder has died, contact us. After reasonable checks, we can close the account and delete its data.

How to use your rights. Use the contact form (topic “Privacy or data request”), or email [email protected]. You can also cancel your subscription and remove monitored addresses yourself in your dashboard. To protect you, we verify requests, usually by confirming control of the email address involved. We respond within the time the law requires (generally 30 days, or up to 45 days under US state laws where permitted). You may use an authorized agent where the law allows.

Closing your account. Once you have no active subscription or trial and your paid period has ended, you can close your account yourself from the Account tab of your dashboard. Or ask us through the contact form or at [email protected]; after we confirm the request comes from you, we close it within 30 days. Closing it is permanent and removes your monitored email addresses from monitoring, deletes your account’s breach records and additional emails, stops notifications, and cancels your subscription (through Freemius). Some records may be kept where the law requires it (for example transaction records held by Freemius, and consent records as described in Section 6).

13. A note about public breach data and your “resolved” status

Deleting your account or marking a breach “resolved” does not remove your data from the internet or from third‑party breach sources — that data exists outside our control. “Resolved” is a personal tracking flag: it stops us re‑notifying you about that record and erases the masked values we stored. The real protection is to change the affected passwords (and turn on two‑factor authentication) on the breached services, which our guidance and reset links help you do.

14. Third‑party links

The Service links to third‑party sites (for example password‑reset pages and security resources). We do not control and are not responsible for their content or privacy practices; review their policies before giving them data.

15. Changes to this Policy

We may update this Policy to reflect changes in our practices or the law. We will update the “Last updated” date and, for material changes, give additional notice (for example by email or a notice on the Site) before the change takes effect.

16. Contact

Goal Prevail LLC — BellCrier
Contact form: bellcrier.com/contact (topic “Privacy or data request”)
Email: [email protected]
Mail: 254 Chapman Rd, Ste 208, Newark, Delaware 19702, USA

EEA and UK users may also contact their local data protection authority.

17. Definitions

Breach data — information exposed in third‑party security incidents that is already circulating and that we look up through breach‑data providers.
Masked data — a partly hidden value (for example pa******) that we show so you can recognize what to change, without us storing the full value.
Merchant of Record — Freemius, which sells the subscription on our behalf and handles payments, taxes, and payment‑related support.
Personal data / personal information — information that identifies or could reasonably identify a person.
Processing — anything done with personal data, such as collecting, storing, using, or deleting it.
Service — the BellCrier breach‑monitoring service operated by Goal Prevail LLC.