Legal notice

Publisher

This site is published on a non-professional basis by a private individual. As allowed by article 6-III-2 of French law no. 2004-575 of 21 June 2004 (LCEN), the publisher has given their identity to the hosting provider and does not publish it. You can reach them contact@rapidall.eu.

The publisher's sites appear under the name Rapid.

Hosting provider

OVH SAS — 2 rue Kellermann, 59100 Roubaix, France — RCS Lille Métropole 424 761 419 — téléphone +33 9 72 10 10 07.

Third-party content and data

• XposedOrNot (xposedornot.com) tells whether an address appears in a known breach. When you click “Check”, YOUR browser sends it the address you typed, directly, without going through our server; when you open the “Recent breaches” tab, it also asks it for its public breach catalogue. XposedOrNot therefore sees that address and your IP address. It states that it does not keep the addresses searched. Its results are shown with its name, as it asks.
• LeakCheck (leakcheck.io) tells whether an email address or a username appears in a known breach: the name and month of each breach, and the types of data exposed taken together — never the data itself. When you click “Check”, it is OUR server that queries it, at most one request per second for the whole site: it passes on 24 characters of the SHA-256 hash of your address, computed by your browser, or your username as you typed it. LeakCheck therefore sees our server's IP address, not yours. A hash is not anonymity: LeakCheck can recognise an address that its files already contain. It states that it does not keep searches. Its results are shown with the words “Powered by LeakCheck”, as it asks.
• Have I Been Pwned (haveibeenpwned.com) provides two things, always requested by YOUR browser, directly: the password test (Pwned Passwords) — your browser computes the SHA-1 hash of the password and sends only its first 5 characters out of 40, never the password — and the public catalogue of breaches (CC BY 4.0 licence), downloaded when you open the “Recent breaches” tab. Have I Been Pwned sees your IP address during these requests.
• Public lists, copied onto our server: 2FA Directory and its passkeys list (2factorauth; MIT and CC BY 4.0 licences), JustDeleteMe (MIT) and datarequests.org (CC0), reduced to the sites in the breach catalogues, as well as the zxcvbn-ts tool (MIT) and its English and French dictionaries (including word frequencies taken from OpenSubtitles by OPUS, ODC-BY licence). Your browser downloads them in full from our server, like the page itself: nothing you type or search for goes with them, and these projects do not see your visit. This information may be incomplete or out of date. The GDPR letter is prepared in your browser: we never send it; you send it yourself if you wish.
• The texts and code of this site are the work of its publisher. Third-party data and maps remain under their own licences.

Advertising

This site shows no advertising at the moment. If it ever does, this page and the privacy policy will say so.

Liability

This site is informational and free, and is affiliated with neither XposedOrNot, LeakCheck nor Have I Been Pwned. Their results may be incomplete or late: no result does not prove that your data is safe. The publisher guarantees neither the accuracy of the results nor the continuity of the service.

RapidGuard also has a version with an account, by invitation only: an invited Rapid account has its addresses and usernames checked every night by our server, and receives an email when a new breach appears. It has its own legal notice and privacy policy, in French with an English summary: rapidall.eu/compte/mentions-legales · rapidall.eu/compte/confidentialite.

This page is a courtesy translation. Only the French version, Mentions légales, is authoritative.