Home · Privacy Policy · Terms of Service · Accessibility · Contact
CCPA / California Privacy Disclosures
This page is the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) disclosure for Leaklet, operated by Misconfigs LLC. It is the notice at collection and the site disclosures page for California residents. The full Privacy Policy still applies.
Notice at collection
If you are a California resident, we may collect the personal information described below when you visit leaklet.com, create a leaklet.com account, subscribe to Pro, email us, or use the Leaklet Chrome extension. We use it to operate Leaklet, take payment, rank opportunity hints, suggest content ideas, prevent abuse, and answer support or legal requests. We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
Categories of personal information
In the last 12 months we have collected, or may collect, these categories:
- Identifiers: email address, IP address, a cookie that identifies this browser for scan counts, a random install id (or an eight-character prefix of it in operational logs), and a leaklet.com account id.
- Commercial information: Pro payment amount, payment status, billing country, subscription status, Stripe customer or checkout ids, and the limited card details Stripe shows merchants (for example the last four digits). We do not receive or store your full card number.
- Internet or other electronic activity: pages you load on leaklet.com, API path, time, HTTP status, how long a request took, response size, a count of ranked or labeled items, whether the caller used a Pro license, and whether the caller was the Chrome Web Store build, an unpacked build, or leaklet.com. A scan may send a short text sample, page title, and page URL to Google Gemini so we can rank that YouTube scan and suggest content ideas. We do not keep that scan payload after the response. The current extension does not send photos or video stills. If you have Leaklet Pro, we may also keep scan summaries on your leaklet.com account: page URL and title, a short AI brief, topic and product names, program names, content idea phrases, chip names with https join URLs, and programs you marked Joined. We may also keep product names you saved.
- Geolocation data: this device's time zone and language, and a country code IPinfo returns from the IP that reached leaklet.com. We use time zone first, then that country, to pick handwritten affiliate program pages for your region. We do not store the time zone, language, or country code with the ranking payload after the response. A coarse region may stay with the scan on your device.
- Account credentials: a one-way hash of your leaklet.com password. We do not store the password itself. If you used Google sign-in, we may hold a Google account id.
We do not collect Social Security numbers, driver's license numbers, financial account numbers, precise geolocation, biometric identifiers, or the contents of your email except when you write to us.
Sources
- You, when you scan a page, create an account, subscribe, or email us
- Your browser or device (IP address, time zone, language, cookies)
- Service providers who process that information for us: Stripe, Resend, IPinfo, and Google (Chrome, optional Google sign-in, Gemini, and Google Cloud hosting for leaklet.com)
Business purposes
- Provide, operate, and secure the Chrome extension and leaklet.com
- Process Pro payments, license keys, and billing
- Rank opportunity hints and content ideas on YouTube pages you choose to scan
- Suggest handwritten affiliate program pages for your region
- Measure reliability, prevent abuse, and answer support or legal requests
Third parties and service providers
We disclose personal information to service providers who process it for the purposes above: Stripe (payments), Resend (license email), IPinfo (country from IP), and Google (Chrome, optional Google sign-in, Gemini ranking, and Google Cloud hosting). Google user data from a connected YouTube channel is shared, transferred, or disclosed only to Google Cloud and Google Gemini, as described in the Privacy Policy. We do not share, transfer, or disclose that Google user data with Stripe, Resend, or IPinfo. The current extension does not contact destination sites to check whether a link responds. A program chip opens a third-party page in your browser, and that site's own terms apply. The leaklet.com homepage also loads a promo player from youtube-nocookie.com, so opening that page can send your IP address to YouTube. leaklet.com also loads a Google Ads tag so we can measure visits from our ads. Google may receive the page address. The Chrome extension does not load that tag. We do not sell personal information to data brokers.
Do Not Sell or Share My Personal Information
Leaklet does not sell personal information as defined by the CCPA, as amended by the CPRA. Leaklet does not share personal information for cross-context behavioral advertising. leaklet.com loads a Google Ads tag to measure visits from our ads. That tag is not in the Chrome extension. We do not run Google Analytics. There is no sale for you to opt out of. If we start sharing personal information for cross-context advertising, we will update this page and offer a request method here.
We also do not use or disclose sensitive personal information to infer characteristics about you. A password hash and payment data are used only to sign you in and take payment.
Your California rights
California residents may request:
- To know the categories and specific pieces of personal information we have collected about you
- To delete personal information we hold, subject to legal exceptions
- To correct inaccurate personal information we hold
- To opt out of the sale or sharing of personal information (we do not sell or share)
- To limit use and disclosure of sensitive personal information (we do not use it to infer characteristics)
- Not to be discriminated against for exercising these rights
We cannot remotely wipe chrome.storage or scan history on your device. You can delete history in the extension or uninstall Leaklet. If you uploaded summaries to leaklet.com, you can delete that copy after you sign in, or email us to delete the account copy.
How to exercise your rights
Email support@leaklet.com with the subject "CCPA request". Say whether you want to know, delete, or correct, and include the email you used on Stripe or for a leaklet.com account if you have one. We will verify the request with information we already have (for example that email or a recent payment). We will respond within 45 days, or tell you if we need more time (up to 45 additional days). You may use an authorized agent. The agent must send proof they can act for you, and we may still need to verify you directly.
Shine the Light
California Civil Code section 1798.83 (Shine the Light) lets residents ask whether we disclosed personal information to third parties for their own direct marketing. We do not disclose personal information to third parties for their direct marketing.
Contact
Misconfigs LLC. Privacy and CCPA requests: support@leaklet.com. Also see the Privacy Policy and Contact page.