This notice is deliberately limited to the public fireintel.net implementation. It does not describe every data source or retention rule used by authenticated FireIntel products.
At a glance
- Public-site scope explained
- Form and domain flows documented
- One privacy contact route
Scope, identity, and last update
This Website Privacy Notice applies to the public fireintel.net site and its walkthrough-request endpoint. It was last updated on October 7, 2026. FireIntel can be contacted at support@fireintel.net about this notice or a website-data request.
The XTI workspace, Log Platform, public feed, plans portal, and other linked services are separate surfaces and may have additional data-handling terms. Do not use this notice as a complete description of an authenticated product deployment.
Walkthrough requests
The form asks for your name, work email, organization, role or team, primary workflow, and consent to be contacted. Team size and the free-text walkthrough question are optional. Do not submit credentials, incident evidence, or other sensitive data.
The browser sends the form to a same-origin Worker endpoint. After validation, the request is delivered through Cloudflare Email Routing to support@fireintel.net. A request identifier and UTC timestamp are created, and hashed source-address and email values are used for abuse rate limiting. Those hashes are pseudonymous identifiers, not anonymous data.
XRILAND does not bind a database for walkthrough requests. The support mailbox, service logs, and Cloudflare infrastructure may still retain related information. XRILAND code does not define those retention periods; contact support@fireintel.net for current retention or deletion handling.
Domain exposure checks
The domain field is normalized in your browser and placed in the result-page URL. The result page sends that domain to the public FireIntel XTI summary endpoint to retrieve the available aggregate exposure context.
A result may include aggregate credential categories, dates, affected endpoints or applications, malware context, password-strength summaries, limited record context, and underground references. The public interface withholds usernames and passwords. Only submit a domain you own, control, or are authorized to assess.
Because the domain appears in a URL and network request, it may be present in browser history and infrastructure logs. Result pages are sent with no-store and noindex directives, but those directives are not access control.
Technical request data, cookies, and browser storage
Like most hosted websites, the service infrastructure can process request metadata such as IP address, user agent, requested URL, timestamp, and security signals needed to deliver and protect the site.
Google Analytics is optional on the public website and loads only after you choose Allow analytics in the preferences on this privacy page. There is no automatic consent popup, and analytics remains off if you do not choose. Rejection does not prevent use of the website. The site stores your analytics preference in localStorage for up to 180 days. Accepted analytics can use first-party Google Analytics cookies to measure visits and sessions; this setup does not enable advertising personalization or Google Signals.
Analytics uses an explicit list of public pages and removes URL query strings, fragments, and referrer URLs from the page data it sends. Domain-check result URLs, submitted domains, form fields, API responses, and authenticated workspaces are excluded from this integration. Google can still process technical request data, including your IP address and browser information, when you allow its analytics script; the measurement is not completely anonymous.
Return to the analytics preferences on this privacy page to change your choice. Reject analytics stops future measurement from this integration and clears its accessible first-party analytics cookies. It does not erase information already received by Google. A linked FireIntel service may operate differently and should be evaluated under the notice or terms shown on that service.
Service recipients and choices
Cloudflare supports public-site hosting, security controls, Images, rate limiting, and email routing. The XTI public API processes domains submitted to the exposure check. Google receives optional analytics data when you consent. Network and service providers may process information in locations where they operate.
Providing walkthrough information is optional, but FireIntel cannot prepare or respond to the request without the required contact and workflow fields. You may withdraw contact consent or request access, correction, or deletion where applicable by emailing support@fireintel.net. You may also raise a concern with the data-protection authority that applies to you.