Legal / Privacy Policy

Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains what personal data DOSINT (the “Service”), operated by the DOSINT Team (“we”, “us”), collects, why we collect it, how it is used and what rights you have. By creating an account or using the Service you confirm that you have read it. For any privacy request, contact us through our support server.

1. Who is responsible for your data

The DOSINT Team (“DOSINT Team”, “we”, “us”) is the data controller for the personal data described below. You can reach us at any time through the support server.

2. Data we collect

• Account data. Your Discord username, avatar and email address as shared by Discord, a unique user ID, and sign-in timestamps. We never receive or store a password: sign-in is done through Discord.
• Search history. For every lookup you run, we store the module used (for example domain, person, phone, Discord), the indicator you typed (up to 500 characters) and the time. This can include domains, usernames, emails, IP addresses, names, phone numbers and Discord IDs. History is private to your account and you can clear it from the Dashboard.
• Case notes. The titles and text you write in the Case Notes module, stored in your account until you delete them.
• Discord lookups. When you analyze a Discord ID, our server queries the official Discord API and stores a snapshot of the public profile fields it returns (ID, username, display name, discriminator, avatar and banner identifiers, accent color, public badge flags, bot flag and the raw API response), linked to your account. Snapshots are saved only when something changes and are used to build the observation history shown to you.
• Technical data. Our hosting and database providers (Vercel and Supabase) process your IP address, browser/user-agent and request timestamps in server logs for security, abuse prevention and operation of the Service. We apply a per-account rate limit on Discord lookups.
• Cookies and browser storage. Necessary: the sign-in session token is kept in the local storage of your browser so you stay signed in, and your cookie choice is saved in a first-party cookie named dosint_consent (180 days). Preferences, only with your consent: theme and language. We do not use advertising cookies, analytics or cross-site trackers. You can change your choice at any time from Cookie settings in the footer.

3. How and why we use data

• To create and secure your account and provide the features you request (performance of a contract).
• To keep the Service secure, prevent abuse and enforce our Terms (legitimate interests).
• To respond to support requests and comply with legal obligations (legitimate interests / legal obligation).

We do not sell your personal data, we do not use it for advertising, and we do not use it to make automated decisions about you.

4. Information about other people

The Service lets you research indicators that may relate to other individuals. We do not query private databases and we only generate links to public services or read public profile data from the official Discord API. You are responsible for having a lawful basis for any research you carry out and for complying with applicable data-protection law. Data about third parties that you enter or save stays private to your account and is not shared with other users. If you believe your own data appears in a lookup history and you want it removed, contact us through the support server and we will review the request.

5. Who we share data with

• Supabase – authentication and database hosting.
• Vercel – website and serverless function hosting.
• Discord – receives the Discord ID you analyze (from our server) when you request a profile. Avatar and banner images are loaded in your browser directly from Discord’s CDN, which therefore sees your IP address.
• jsDelivr – content delivery network from which your browser loads the Supabase client library; it sees your IP address.
• Third-party services you open. Many modules generate links to external services (for example Google, Shodan, VirusTotal). The indicator is part of the link; when you click it, that service receives it under its own privacy policy.

We may also disclose data if required by law or to protect rights, safety and the integrity of the Service.

6. International transfers

Our providers may process data outside your country, including outside the European Economic Area. Where required, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses.

7. Retention

• Account data: until your account is deleted.
• Search history: until you clear it or your account is deleted.
• Case notes: until you delete them or your account is deleted.
• Discord snapshots: until your account is deleted or you ask us to remove them.
• Server logs: according to the retention periods of Vercel and Supabase.

8. Security

Data is transmitted over HTTPS, sign-in is delegated to Discord, and database access is restricted with Row Level Security so each user can only read and change their own records. No system is completely secure; please use a strong, unique password.

9. Your rights

Depending on where you live (for example under the GDPR in the EU/EEA or the UK GDPR), you may have the right to access, correct, delete, restrict or port your data, to object to certain processing, and to withdraw consent where processing is based on it. You can clear your history and delete your cases yourself in the app. For account deletion, a copy of your data or any other request, contact us through the support server. You also have the right to lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali).

10. Children

The Service is intended for people aged 18 and over. We do not knowingly collect data from minors; if you believe a minor has registered, contact us and we will delete the account.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date shows the latest version; material changes will be announced on the support server or in the app.

12. Contact

Questions or requests: https://discord.gg/dzcBMtsd7C