Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains what personal data DOSINT (the “Service”), operated by the DOSINT Team (“we”, “us”), collects, why we collect it, how it is used and what rights you have. By creating an account or using the Service you confirm that you have read it. For any privacy request, contact us through our support server.

1. Who is responsible for your data

The DOSINT Team (“DOSINT Team”, “we”, “us”) is the data controller for the personal data described below. You can reach us at any time through the support server.

2. Data we collect

• Account data. Your username, avatar and email address as shared by the provider you sign in with (Discord, GitHub or Google), a unique user ID, and sign-in timestamps. We never receive or store a password: sign-in is done through the provider.
• Search history. For every lookup you run, we store the module used (for example domain, person, phone, Discord), the indicator you typed (up to 500 characters) and the time. This can include domains, usernames, emails, IP addresses, names, phone numbers and Discord IDs. History is private to your account and you can clear it from Home.
• Case notes. The titles and text you write in the Case Notes module, stored in your account until you delete them.
• Discord lookups. When you analyze a Discord ID, our server queries the official Discord API and stores a snapshot of the public profile fields it returns (ID, username, display name, discriminator, avatar and banner identifiers, accent color, public badge flags, bot flag and the raw API response), linked to your account. Snapshots are saved only when something changes and are used to build the observation history shown to you.
• Technical data. Our hosting and database providers (Vercel and Supabase) process your IP address, browser/user-agent and request timestamps in server logs for security, abuse prevention and operation of the Service. We apply a per-account rate limit on Discord lookups.
• Cookies and browser storage. Necessary: the sign-in session token is kept in the local storage of your browser so you stay signed in, and your cookie choice is saved in a first-party cookie named dosint_consent (180 days). Preferences, only with your consent: theme and language. We do not use advertising cookies, analytics or cross-site trackers. You can change your choice at any time from Cookie settings in the footer.

3. How and why we use data

• To create and secure your account and provide the features you request (performance of a contract).
• To keep the Service secure, prevent abuse and enforce our Terms (legitimate interests).
• To respond to support requests and comply with legal obligations (legitimate interests / legal obligation).

We do not sell your personal data, we do not use it for advertising, and we do not use it to make automated decisions about you.

4. Information about other people

The Service lets you research indicators that may relate to other individuals. We do not query private databases and we only generate links to public services or read public profile data from the official Discord API. You are responsible for having a lawful basis for any research you carry out and for complying with applicable data-protection law. Data about third parties that you enter or save stays private to your account and is not shared with other users. If you believe your own data appears in a lookup history and you want it removed, contact us through the support server and we will review the request.

5. Who we share data with

• Supabase – authentication and database hosting.
• Vercel – website and serverless function hosting.
• Discord – receives the Discord ID you analyze (from our server) when you request a profile. Avatar and banner images are loaded in your browser directly from Discord’s CDN, which therefore sees your IP address.
• jsDelivr – content delivery network from which your browser loads the Supabase client library; it sees your IP address.
• Third-party services you open. Many modules generate links to external services (for example Google, Shodan, VirusTotal). The indicator is part of the link; when you click it, that service receives it under its own privacy policy.

We may also disclose data if required by law or to protect rights, safety and the integrity of the Service.

6. International transfers

Our providers may process data outside your country, including outside the European Economic Area. Where required, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses.

7. Retention

• Account data: until your account is deleted.
• Search history: until you clear it or your account is deleted.
• Case notes: until you delete them or your account is deleted.
• Discord snapshots: until your account is deleted or you ask us to remove them.
• Server logs: according to the retention periods of Vercel and Supabase.

8. Security

Data is transmitted over HTTPS, sign-in is delegated to Discord, and database access is restricted with Row Level Security so each user can only read and change their own records. No system is completely secure; please use a strong, unique password.

9. Your rights

Depending on where you live (for example under the GDPR in the EU/EEA or the UK GDPR), you may have the right to access, correct, delete, restrict or port your data, to object to certain processing, and to withdraw consent where processing is based on it. You can clear your history and delete your cases yourself in the app. For account deletion, a copy of your data or any other request, contact us through the support server. You also have the right to lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali).

10. Children

The Service is intended for people aged 18 and over. We do not knowingly collect data from minors; if you believe a minor has registered, contact us and we will delete the account.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date shows the latest version; material changes will be announced on the support server or in the app.

12. Contact

Questions or requests: https://discord.gg/dzcBMtsd7C

Terms of Service

Last updated: October 9, 2026

These Terms govern your access to and use of DOSINT (the “Service”), operated by the DOSINT Team (“we”, “us”). By creating an account or using the Service you agree to them. If you do not agree, do not use the Service.

1. Eligibility and accounts

You must be at least 18 years old and able to enter a binding agreement. You are responsible for the accuracy of your registration details, for keeping your credentials confidential and for all activity under your account. Tell us promptly if you suspect unauthorized access.

2. What the Service does

DOSINT is a research aid for open-source intelligence. It generates links to public third-party services, analyzes data you enter locally in your browser, and, for Discord IDs, retrieves public profile data through the official Discord API. It does not access private databases and does not bypass any protection or access control.

3. Acceptable use

You may use the Service only for lawful, legitimate purposes such as cybersecurity, source verification, journalism, due diligence and research. You agree not to:

• harass, stalk, threaten, track, dox or expose any person, or use results to cause them harm;
• use the Service to violate any law, including data-protection and privacy law, or the rights of others;
• attempt unauthorized access to accounts, systems or data, or to bypass security, rate limits or other restrictions;
• automate, scrape or overload the Service or its API endpoints, or interfere with its operation;
• resell, sublicense or provide the Service to third parties without our permission;
• misuse Discord’s data in breach of Discord’s terms, policies or developer rules.

You alone are responsible for how you use the results and for having a lawful basis for any research you perform.

4. Third-party services

The Service links to and relies on services we do not control (for example Discord, Supabase, Vercel and the sites you open from generated links). Their availability, content and terms are outside our responsibility and your use of them is governed by their own terms and privacy policies.

5. Your content

You keep ownership of the notes and other content you store. You grant us a limited licence to host and process it solely to operate the Service for you. You are responsible for your content and for not storing anything unlawful.

6. Accuracy and availability

Information produced by the Service comes from public sources and may be incomplete, outdated or wrong. Verify important findings independently before relying on them. We may modify, suspend or discontinue features at any time and do not guarantee uninterrupted or error-free operation.

7. Suspension and termination

We may suspend or terminate your access, with or without notice, if we believe you have violated these Terms or the law or put the Service or others at risk. You may stop using the Service and request deletion of your account at any time through the support server.

8. Disclaimer

The Service is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including merchantability, fitness for a particular purpose and non-infringement, to the fullest extent permitted by law.

9. Limitation of liability

To the fullest extent permitted by law, we are not liable for any indirect, incidental, special, consequential or punitive damages, or for loss of data, profits or reputation, arising from your use of or inability to use the Service. Nothing in these Terms limits liability that cannot be excluded by law, including your statutory consumer rights.

10. Indemnity

You agree to indemnify and hold us harmless from claims, damages and expenses arising from your breach of these Terms or your unlawful use of the Service, to the extent permitted by law.

11. Changes

We may update these Terms. The “Last updated” date shows the current version. Continued use of the Service after a change means you accept the updated Terms.

12. Governing law

These Terms are governed by the laws of the country where the DOSINT Team is established, without prejudice to any mandatory consumer-protection rules that apply to you.

13. Contact and support

Questions, abuse reports or support: https://discord.gg/dzcBMtsd7C