Privacy policy

Last updated: October 19, 2026. This page is a plain-English template written for a small sole-proprietor business. It is not legal advice and has not yet been reviewed by a lawyer.

LookalikeGuard is run by an individual sole proprietor doing business as LookalikeGuard, LookalikeGuard, 456 Glenbrook Rd #650, Stamford, CT 06906. Questions or requests: hello@lookalikeguard.com.

What we collect and why

• Domains you scan or monitor, and the results we find for them (lookalike domains, scores, reasons, history). This is the service itself.
• Your IP address, stored with each scan and each sign-in request, to enforce rate limits and stop abuse. Our web server also keeps a standard access log (IP address, time, page requested, browser type).
• Your email address, if you create an account, to send sign-in links, alerts, digests and account emails. We keep a log of which emails we sent you (template, subject, time).
• Account settings you choose: alert threshold, digest preference, brand rules (extra and ignored terms), notes and feedback on findings, webhook URL and its signing secret.
• API keys: we store only a hashed form plus a short prefix so you can tell keys apart.
• Billing records: if you subscribe, we store your Stripe customer ID, subscription ID and subscription status. We never see or store your card number; Stripe handles payment details.

We do not sell your data, we do not use advertising or tracking cookies, and we do not run third-party analytics on the site.

Cookies

We use one cookie: a sign-in session cookie (HTTP-only, secure) that keeps you logged in for up to 30 days. Without it you can still run a free scan.

Shared result links

Each scan gets a result page at a hard-to-guess link (lookalikeguard.com/r/...). Anyone who has the link can view it, so only share it with people you want to see it. Result pages are excluded from search engines via robots.txt.

Who processes data for us

• DigitalOcean (United States): hosts our server and database.
• Cloudflare: provides DNS for our domain and forwards email sent to hello@lookalikeguard.com.
• Resend: delivers the emails we send (sign-in links, alerts, account emails). It receives your email address and the message content.
• Stripe: processes subscriptions. Through Stripe Managed Payments, Stripe (with its Link service) acts as the seller of record for your purchase and collects payment, billing and tax details under its own privacy policy: stripe.com/privacy.
• Our email inbox is hosted by Google (Gmail), so emails you send us are stored there.

To run scans we send the lookalike domain names (not your personal details) to public sources such as DNS resolvers, crt.sh, RDAP registration services, and the lookalike websites themselves.

How long we keep it

We keep account data, monitored domains and findings while your account is open. Scan results and logs are kept until we delete them. Nightly server backups are kept for 14 days. If you ask us to delete your account, we delete your account data within 30 days, except records we must keep for legal, tax or fraud reasons. Stripe keeps its own billing records.

Your choices and rights

• Unsubscribe from non-essential emails with the link at the bottom of any email. Sign-in links and alerts you set up are still sent.
• Export your findings any time as CSV from the dashboard.
• Email hello@lookalikeguard.com to access, correct or delete your data. We reply within 30 days. Depending on where you live, you may have extra rights under local law, and we will honor them.

Security

Traffic is encrypted (HTTPS). Sign-in links and API keys are stored hashed. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

Children

The service is for businesses and is not meant for anyone under 18.

Changes

If we change this policy in a meaningful way we will update the date above and, for account holders, email you.