Legal
Terms, Privacy & Contact.
One page, plainly written. It covers what DROPSINT is for, what it does with your data, and how to reach us.
Who this is for
DROPSINT is built for researchers and security professionals doing lawful, authorized investigation work — verifying an account you're responsible for, checking your own exposure in known data breaches, or looking into a target you have a legitimate reason to look into. It is not affiliated with, and does not have special access to, any of the platforms it looks up (Steam, and the hundreds of sites Sherlock and Holehe check).
Terms of use
By creating an account or running a search, you agree to the following:
- You'll only look up accounts, emails, or numbers you're authorized to investigate — your own, or ones covered by a legitimate engagement (an investigation, a security assessment, recovering your own account).
- You won't use results to harass, stalk, dox, or otherwise harm the person the data belongs to.
- Every real lookup spends one credit from your account balance. Credits aren't refunded once a lookup has run, successful or not, since the underlying cost (API calls, compute) is incurred either way.
- We can suspend an account we reasonably believe is being used to violate these terms.
- The service is provided as-is. Third-party data (breach records, site existence checks, IP geolocation) can be wrong, incomplete, or out of date — verify anything that matters before acting on it.
Privacy
What we store about your account: your email address, a salted hash of your password (never the password itself), your API key, your credit balance, and a log of the searches you run (which tool, what you searched, and when) so your History page has something real to show.
What happens to a search query: it's sent to whichever service actually answers it — Steam's Web API, ip-api.com, or the Sherlock/Holehe/XposedOrNot checks running on our own backend — get a result, and log the outcome to your account. We don't sell search history or account data to anyone.
What we don't do: we don't run lookups you didn't ask for, and we don't retain the full result content beyond what your History page shows you.
Contact
— placeholder: replace with a real support address once one exists, e.g. [email protected] —