Terms of Service

Agreement and eligibility

These Terms of Service (“Terms”) are an agreement between the CheckLeaked.cc service operator (“CheckLeaked,” “we,” “us,” or “our”) and the person or organization using a CheckLeaked service that links to them (“you”). By creating an account, buying or redeeming access, calling an API, or otherwise using the service, you agree to these Terms.

You must be at least 18 years old and legally capable of entering this agreement. If you use the service for an organization, you confirm that you have authority to bind it, and “you” includes that organization. You may not use the service if law prohibits you from receiving it.

Our Privacy Policy explains how we handle personal information. It is notice, not a blanket request for consent. Additional terms shown for a specific API, integration, promotion, or checkout also apply; if they conflict, the more specific term controls for that feature.

What CheckLeaked provides

CheckLeaked helps users investigate whether identifiers or accounts appear in third-party data-breach and security sources. Depending on your plan and location, features may include breach search, exposure summaries, saved searches, monitoring, notifications, password or hash-related tools, exports, developer APIs, browser extensions, and official bots.

The service combines information from licensed providers, security-research sources, and publicly accessible incident sources. We are independent from those sources unless expressly stated. In particular, our use of a provider’s API does not mean that provider owns or endorses CheckLeaked.

Authorized and prohibited use

Permitted use

You may use the service only for a lawful purpose and only when you have a valid legal basis and any required authorization. Examples include checking your own exposure, protecting systems or people you are authorized to protect, conducting a documented good-faith security investigation, or complying with a lawful professional or regulatory duty.

You are responsible for notices, permissions, and safeguards required for your use.

Prohibited use

You must not use the service to:

• access or attempt to access an account, system, network, or device without authorization, including credential stuffing or password reuse attacks;
• commit or facilitate fraud, identity theft, extortion, stalking, harassment, doxxing, intimidation, discrimination, or physical harm;
• make decisions about credit, employment, housing, insurance, education, healthcare, or another regulated eligibility purpose unless law expressly permits the data and decision process;
• search, monitor, or profile a person without a lawful basis, required notice, and authorization;
• publish, sell, license, trade, or redistribute raw results, credentials, personal data, downloads, or substantial portions of a source;
• build marketing, spam, surveillance, or lead-generation lists from results;
• expose passwords or sensitive records to people who do not need and are not authorized to receive them;
• scrape, crawl, bulk-harvest, mirror, benchmark for competitive replication, reverse engineer, or bypass a technical or contractual access limit except where non-waivable law expressly allows it;
• share, resell, sublicense, or publicly disclose an account, session, API key, bot token, license key, or paid entitlement except through an authorized CheckLeaked reseller workflow;
• upload or distribute malware, interfere with service operation, evade rate limits, probe our infrastructure without written authorization, or disrupt another user;
• impersonate another person, misrepresent authority, remove notices, or submit false information;
• infringe privacy, data-protection, confidentiality, intellectual-property, export-control, sanctions, or other applicable law; or
• enable another person to do anything prohibited by these Terms.

If you are unsure whether a search is authorized, do not run it until you have confirmed your legal basis and permission.

Accounts, license keys, and security

Give accurate account information and keep it current. You are responsible for activity performed through your account, integrations, keys, or authenticated sessions unless caused by our failure to use legally required care.

• Protect your sign-in provider, devices, session tokens, API keys, bot tokens, and license keys.
• Use each entitlement only for the number of users, devices, requests, or integrations shown at purchase or in the applicable documentation.
• Notify [email protected] promptly if credentials or keys may be compromised.
• Do not defeat account verification, plan limits, cooldowns, monitoring limits, or security controls.

We may rotate, revoke, or require replacement of a credential that is exposed, abused, duplicated, associated with fraud, or creates a security risk. You can request account destruction from Profile; the emailed confirmation link expires in less than 24 hours.

Referral program

Signed-in users can share a personal invite link. While the referral program runs, the person who shared the link (the “referrer”) earns plan days, not money, when the new accounts they invite pay for a plan.

• Days only. Referral days are plan days with no cash value. They cannot be paid out, sold, transferred to another account, or exchanged for anything else.
• New accounts only. An invite counts only for a new account: it must be at most 7 days old when it joins through the link, and the same person must not have made a purchase more than 48 hours before joining. Each account can have one referrer; the first valid invite counts.
• What is earned. The referrer earns 3 days for each paid month the invited account buys, renewals included; a lifetime purchase counts as 12 months. The invited account gets a one-time 3-day bonus on its first paid purchase, except on lifetime purchases.
• Holds and removal. Earned days are held for 14 days (30 days for card orders through our storefront) before they can be used. They are removed if the payment is refunded, disputed, reversed, or never applied, or if the key it bought is revoked. Days already released may also be removed if the payment is reversed later.
• Yearly cap. A referrer can earn at most 365 days per rolling year; purchases beyond the cap earn nothing.
• Fair play. Self-referral, duplicate or fake accounts, and paying for your own referrals forfeit the days involved and may lead to account closure.
• Using days. Redeemed days extend your current plan, or start Plus if no plan is active. They cannot be applied to lifetime access or push a plan more than 364 days ahead.
• Expiry and program end. Days do not expire while the program runs. We may change or end the program; days earned before it ends stay redeemable for at least 12 months after the end. Destroying your account deletes your referral code and removes days not yet redeemed.
• Sharing. When you share your link, say that you earn a reward if people join through it. Do not send spam or unsolicited messages, and do not present your link as a message from CheckLeaked.

APIs, bots, extensions, and integrations

Follow the current documentation, authentication requirements, quotas, field restrictions, and technical instructions for each integration. Do not expose a secret key in client-side code, a public repository, a support message, or other public material.

We may set or change reasonable rate limits, concurrency limits, result caps, fields, formats, or abuse controls to protect the service and its data providers. Material changes to a paid feature will be handled under section 13. Caching is permitted only for your authorized purpose, for no longer than necessary, with appropriate security and deletion controls.

Integrations with Discord, Slack, Telegram, Google, browsers, or another platform are also governed by that platform’s terms. You are responsible for configuring scopes, channels, recipients, and notifications so results are not disclosed to unauthorized people.

Search results and breach information

Results may contain personal data, confidential material, password hashes, plaintext credentials, or other sensitive information originating from third-party incidents. You receive a limited right to view and use results only for your lawful, authorized purpose and subject to these Terms and any source-specific restriction.

You must apply safeguards proportionate to the information, including:

• minimizing queries and returned fields;
• restricting access to people with a documented need;
• using secure storage and transport;
• notifying an affected person or organization only when lawful and safe;
• deleting exports and local copies when no longer needed; and
• not using a result as the sole basis for an adverse or high-impact decision.

Source coverage, accuracy, availability, and fields can change without notice. Records may be duplicated, incomplete, fabricated, stale, misattributed, already remediated, or removed by an upstream provider. CheckLeaked does not warrant that a “no result” means an identifier has never been exposed.

Paid access, prices, and billing

The checkout or pricing page shows the controlling price, currency, taxes if stated, duration, quantity, plan limits, and included features at the time of purchase. Plans and limits change over time, so old descriptions do not override the current checkout.

Paid access may be delivered as a redeemable license key, a direct account upgrade, a fixed-term plan, a one-time unlock, or lifetime access to the identified plan. “Lifetime” means for as long as we continue to operate the purchased service or materially equivalent feature; it does not promise that every feature or data provider will exist forever.

A purchase is a one-time charge unless the checkout clearly and conspicuously states that it recurs and obtains your express agreement. CheckLeaked does not treat silence as consent to a new recurring charge. If a recurring option is offered, the checkout must state the billing interval, amount or calculation, renewal terms, and how to cancel before billing information is submitted.

Card, cryptocurrency, marketplace, or reseller payments are processed by external providers. Their terms, network fees, exchange rates, confirmation requirements, and risk controls also apply. You authorize the provider to send us the transaction and contact information needed to fulfill and support the order.

Cancellation, withdrawal, and refunds

You may stop using the service at any time. Destroying an account does not automatically reverse a completed purchase. If a purchase is recurring, you may cancel future renewal using the method shown at checkout or by contacting us; cancellation stops future charges and normally leaves access active through the already-paid period.

Contact us promptly if a key was not delivered, cannot be redeemed, was materially different from the purchased description, or a charge was unauthorized. We will investigate and provide the repair, replacement, price adjustment, cancellation, or refund required by applicable law and the checkout provider’s rules.

Except where law or the displayed offer provides otherwise, refunds may be refused after a license key has been revealed, redeemed, transferred, or substantially used, or after digital results have been consumed. This limitation does not apply when the service was defective or not supplied as promised, or when another mandatory remedy applies.

Suspension, investigation, and termination

We may limit, suspend, or terminate access when reasonably necessary to address a material breach of these Terms, unlawful activity, fraud, nonpayment, credential compromise, a threat to users or systems, provider restrictions, or a legal requirement. We may preserve relevant evidence and cooperate with a valid legal investigation.

When practical and lawful, we will give notice and an opportunity to correct a remediable issue. Immediate action may be necessary for security, abuse, fraud, or legal risk. You may appeal an enforcement decision by emailing us with the account, decision, and relevant evidence.

On termination, your right to use the service ends. Terms that by their nature should survive—including payment obligations, confidentiality and result safeguards, intellectual property, disclaimers, liability limits, disputes, and accrued rights—remain in effect.

Intellectual property and feedback

CheckLeaked and its licensors retain rights in the website, software, designs, documentation, trademarks, curated presentation, and service technology. Third-party breach records, names, logos, and provider content remain subject to their respective rights; access through CheckLeaked does not transfer ownership.

We grant you a limited, non-exclusive, non-transferable, revocable right to use the service during your authorized access, solely in accordance with these Terms. No right is granted to reproduce, create a competing dataset, remove notices, or use our marks without permission.

If you provide feedback, you allow us to use it without restriction or payment, but you keep ownership of any pre-existing material and should not include confidential information. Send copyright or rights complaints to [email protected] with identification of the work, location, requested action, and a good-faith statement of authority.

Third-party services and content

The service depends on or links to independent breach-data providers, sign-in platforms, payment processors, resellers, infrastructure, analytics, support tools, social platforms, and external websites. We do not control their services, terms, data, availability, security, or decisions.

Your use of a third-party service is governed by its agreement with you. We are responsible for our own acts and obligations, not for an independent provider’s acts merely because its service is linked or integrated. This clause does not limit liability that applicable law assigns to us.

Availability and changes to the service

We work to keep CheckLeaked available but do not promise uninterrupted, error-free, or permanent operation. Maintenance, attacks, upstream outages, legal restrictions, provider changes, or technical failures may delay, limit, or remove a feature or source.

We may improve or modify features, interfaces, quotas, or source coverage. For a material change that significantly reduces the core functionality of active paid access, we will provide reasonable notice when practical and any remedy required by law. We will not use this clause to avoid supplying a service already purchased or to remove mandatory remedies.

We may discontinue the service. If that happens, we will use reasonable efforts to notify active users and address unused paid access as required by the purchase terms and applicable law.

Disclaimers and limits of liability

To the extent law permits, the service and third-party breach information are provided “as is” and “as available.” We disclaim implied warranties that can lawfully be disclaimed, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that results are complete, accurate, current, unique, or suitable as the sole basis for a decision.

You are responsible for how you interpret, secure, disclose, and act on results. CheckLeaked is not liable for harm caused by your unlawful or unauthorized use, an affected party’s original data breach, or an independent provider outside our reasonable control.

To the extent law permits, neither party is liable to the other for indirect, incidental, special, exemplary, or consequential loss, or lost profits, revenue, goodwill, or data, when the loss was not reasonably foreseeable. For non-consumer claims, our aggregate liability arising from the affected service will not exceed the amount you paid us for that service during the 12 months before the event giving rise to the claim.

If you use the service for a business, you will indemnify CheckLeaked against a third-party claim to the extent it results from your unlawful search, disclosure, redistribution, infringement, or material breach of these Terms. This does not apply to the extent the claim was caused by us and does not impose an indemnity on a consumer where law prohibits it.

Disputes and general terms

Contact us first so we can try to resolve a dispute informally. These Terms do not require arbitration and do not prevent either party from seeking urgent injunctive relief or using a court or consumer process that has jurisdiction under applicable law.

The law governing a claim and the available court depend on the service operator, the transaction, your location, and mandatory conflict-of-law and consumer rules. Nothing in these Terms deprives a consumer of protections or a forum that cannot lawfully be waived.

• Entire agreement. These Terms, the Privacy Policy, and applicable feature or checkout terms are the agreement about the service and replace earlier statements on the same subject.
• Severability. If a term is unenforceable, it will be limited to the minimum extent necessary and the rest remains effective.
• No waiver. A delay in enforcing a term is not a waiver.
• Assignment. You may not transfer the agreement or an entitlement without our written permission. We may transfer it as part of a reorganization or sale, subject to applicable notice and consumer rights.
• Interpretation. “Including” means “including without limitation.” Headings aid navigation and do not narrow a clause.
• Priority of law. Mandatory law controls over a conflicting term.

Changes to these Terms

We may update these Terms for legal, security, provider, or service changes. The revised version will show a new effective date. Material changes will apply prospectively, and we will provide additional notice where required. If you do not agree, stop using the service before the change takes effect and cancel future renewal, if any.

A change does not retroactively remove an accrued right, excuse an existing obligation, or reduce a mandatory remedy.