Frequently asked questions

LeakTrace checks individual email addresses against available breach records and presents relevant findings and guidance.

LeakTrace currently checks Have I Been Pwned and LeakCheck Public. XposedOrNot API+ is an optional source and is used only when enabled. Provider availability can change; your scan shows which sources actually completed. We do not run dedicated scans of broker websites or dark-web forums. Read more in our Privacy Policy.

For a completed scan with findings, the paid report can include the reported source and date, exposed data types and source severity, an Exposure score for each finding, and an overall exposure score in the recommendations. Scores use available source severity and reported data types; when neither is usable, the report shows a Moderate baseline labelled as limited source detail.

No. It means the scan found no matching records in the data checked. It cannot prove that an address has never been exposed or that no other records exist.

No. LeakTrace checks the address against available breach records; it does not sign in to or read your mailbox.

Have I Been Pwned is one of the breach sources LeakTrace checks, and you can use it directly for free. LeakTrace combines the connected sources that respond for a scan and gives a free preview with the match count and source names. A paid report adds available finding details and practical recommendations; eligible subscriptions also offer opt-in daily rechecks and emails about new findings. Neither service can check every dataset or prove that an account is safe.

Source severity is a broad review cue, not a probability that someone accessed your account, and a finding alone does not prove account access. Each Exposure score is a rule-based Low, Moderate or High cue using available source severity and reported data types. The overall score appears in the recommendations. If severity and usable data types are both missing, a Moderate baseline is shown and labelled as limited source detail. These scores are not validated probabilities or proof that anyone used the information.

Only check an address you own or are authorised to assess. Company checks must be for addresses the company has added and is authorised to assess.

No. You can start a free scan without creating an account.

A payment prompt is shown only for a completed scan with findings. There is no payment prompt for a scan with no findings or one that failed or is incomplete.

The one-off payment is £5.99. It unlocks the purchased report and later completed reports with findings for that same email address, without another payment. It does not cover other email addresses, scans from before the purchase, or ongoing monitoring and alerts.

Cancel a recurring plan through Manage billing in your dashboard. Cancellation stops the next renewal, and your plan remains active until the end of the current paid billing period; the billing portal shows the effective date before you confirm. You can cancel the automated deletion-notice add-on separately. This stops its future renewals and future eligible notices after the current paid add-on period, but does not cancel or change your main plan or email monitoring. A notice already submitted to a data source cannot necessarily be withdrawn. For the Business Email Plan, seat increases are charged when confirmed and reductions take effect at the next billing date.

For a duplicate or incorrect charge, paid access not provided, or a significant service failure, contact [email protected] with your receipt or payment reference. Recurring charges are not normally refunded for unused time after a renewal or cancellation, except where the paid service was not provided as described. A one-off report is charged only when a completed report with findings is available for paid access; a refund is not normally due just because you expected information beyond LeakTrace’s connected-source coverage. Nothing in this answer limits consumer rights that cannot legally be excluded.

Yes. Guest checkout is available. You can continue to access a guest report in the browser session used for the purchase, or access it through an account with that same verified email address. Simply entering the paid email in another browser does not prove ownership of the report.

The address is sent to Have I Been Pwned for its primary lookup. LeakCheck receives a truncated SHA-256 hash, which may still be identifiable; XposedOrNot receives the address only if its optional integration is enabled. LeakTrace stores the address with scan history and consent records, but never accesses the mailbox or asks for its password. Unpaid scan records expire after 90 days; see the Privacy Policy for other retention periods and provider details.

Free, unpaid scan records, findings and consent records expire after 90 days. Purchased snapshots and snapshots created under paid monitoring are kept while the account is open unless they are erased separately. Findings for a removed monitored address are retained for authorised re-enrollment for 12 months, unless a verified erasure removes them sooner. The Privacy Policy explains billing and operational-record exceptions.

Individual Pro is £9.99 per month for up to three personal email addresses. The Family Shield Plan is £14.99 per month for up to six household email addresses. These plans include opt-in daily rechecks and new-finding emails; one-off payment does not include continuous monitoring.

The account operator adds specific email addresses, with one seat per address. The same account can include addresses from multiple organisations. LeakTrace checks only those listed addresses individually; it never discovers or scans a company or domain.

Yes. You can paste or upload a list containing addresses from different organisations. After you confirm authority and monitoring consent, LeakTrace runs an initial check for each listed address and then checks them daily. Email alerts are sent when new findings appear. Only the addresses you list are checked; other addresses at those organisations are not discovered. Each address uses one seat.

Yes. One Business Email Plan account can manage addresses for multiple organisations. The operator must be authorised to manage the account and submit every listed address for an individual check, including third-party addresses. LeakTrace does not verify mailbox control or search for unlisted addresses.

The Business Email Plan costs £19.99 per selected seat per month. Each seat covers one individually enrolled address. The operator must have authority to submit each address, including addresses managed for another organisation.

No. A scan reports findings and provides recommendations, but it does not automatically remove records from other services or guarantee their removal.

Use the Contact form on the website or send a direct email to [email protected]. Please do not include passwords, payment details or other highly sensitive information in your message.