Skip to content

TRUST & SECURITY

How we handle your information

FendLand exists to put less of your information in circulation, so we hold ourselves to the same standard. This page says exactly what leaves our servers, what we keep, and for how long. Where a limit exists, we name it.

Last reviewed September 24, 2026

AT A GLANCE

What we keep, and for how long

Free check details you typeUsed for the search onlyNot stored
Free check counts (no personal data)Our databaseKept, anonymous
Repeat-check cacheServer cache, hashed key6 hours
Your result, for signupYour browser only24 hours
IP address, for abuse limitsRedis counterUp to 24 hours
Email plus re-check detailsOur database, server onlyUntil you unsubscribe, or 1 year
Number reports (answers + IP hash)Our database, server only1 year
Account dataOur database, your rows onlyUntil you delete the account
Signed authorization lettersPrivate storageWith your account
Card detailsStripe, Apple or GoogleNever held by us

THE FREE EXPOSURE CHECK

What happens when you run the free check

  • To search, we send one query per broker site to SerpAPI, a search provider: your first and last name with your city and state. Middle names and suffixes like Jr are left out.
  • If the name search finds nothing confident on a site, we search that one site again by your phone number. That is the only other thing the search provider sees.
  • Your street address is never sent to the search provider on the free check. We use it on our side, to tell you apart from someone with the same name.
  • We keep no record of who ran a check. Each check leaves a row with counts and which sites answered, and nothing about the person.
  • Running the same details again within 6 hours is answered from a short-lived cache, keyed by a salted hash of your details rather than the details themselves.
  • Your browser keeps a copy of the result for 24 hours, so an account you create starts filled in. It reaches us only if you sign up.
  • To stop abuse, your IP address counts toward a small daily limit. The counter is held in Redis for the length of the limit, at most 24 hours, and never saved to our database.

IF YOU LEAVE YOUR EMAIL

Your checklist and re-check alerts

  • We keep your email, the name, street, city and state you entered, and which sites listed you. We do not keep the phone number.
  • We re-check those sites about every three months for one year, and email you only when a site newly lists you. A clean re-check sends nothing.
  • Marketing email goes out only if you tick the separate box for it. The exact wording you agreed to is stored with the time you agreed.
  • Every email has a one-click unsubscribe. It stops all email to that address and deletes the name, city, street and list of sites at once. If you never unsubscribe, they are deleted when the year ends.
  • This data cannot be read from a browser at all, signed in or not. Only our server can reach it.

NUMBER REPORTS

If you report a number on its page

  • You pick from fixed answers: whether it called or texted, and what it was about. Nothing you type is stored or shown, because there is nowhere to type.
  • To count each visitor once, we keep a keyed one-way hash of your IP address, never the address itself. Reports are deleted after a year.
  • Visitor reports are shown as unverified, only once three different visitors have made one, and they never decide whether a number is blocked.

YOUR ACCOUNT

How your account is protected

  • You sign in with email and password or with Google. Two-factor sign-in with an authenticator app is optional, and once it is on, our server refuses any session that has not passed the second step.
  • Tables that hold your data are under row-level security, so a signed-in account can read only its own rows. Tables only our server should touch are closed to browsers entirely.
  • The database key that can bypass those rules lives only on our server and never reaches your browser.
  • Every page is served over HTTPS with HSTS preload, a content security policy, and framing blocked.
  • Error reports are sent without default personal data, and our analytics sets no cookies.
  • Deleting your account takes effect immediately: it cancels any web subscription, removes your uploaded files, and deletes the account.

PAYMENTS

Billing

  • Web subscriptions are paid on Stripe's own checkout and managed in Stripe's billing portal. We store a Stripe customer ID and your subscription status, never card numbers.
  • Subscriptions started in the app are billed by Apple or Google, and we never see your payment details.

REMOVALS YOU AUTHORIZE

When we file on your behalf

  • You sign once. Each request we send a broker carries a letter of authorization, and the exact letter sent is archived in private storage that only you can retrieve.
  • A broker receives what it needs to find and suppress your record: your name, phone, mailing address and email. Your signed consent cannot be edited after the fact.

BEHIND THE SCENES

Where your data never goes

  • Database changes are rehearsed on a separate test environment first. It has the same structure as production and none of its data: real user records are never copied into it.

QUESTIONS

Ask us anything about this

Write to privacy@fendland.com for anything about your data, or support@fendland.com for everything else. The full legal terms are in our privacy policy.

FREE, NO ACCOUNT

See which sites list you

Your street address never goes to the search provider, and nothing about you is stored unless you ask for the checklist.
Run the free exposure check