Last updated: 30 September 2026 · Applies to myrecon.xyz and the MyRecon Android app
The short version
Lawful use only. Authorised research, your own digital footprint, investigations you are permitted to run.
Never for harassment, stalking, doxxing or discrimination. This is not negotiable and we act on reports.
Results come from public third-party sources and can be wrong, stale or incomplete. Verify before you act.
You are responsible for what you do with what you find. We are not.
Accounts and Extended scan packs are optional. Guests can run Quick across 100 platforms, with the first 2 cards visible and the rest blurred. Standard requires sign-in. Signing in opens 5 free standard reports daily; paid unlimited standard scans and Extended packs are described in section 12. Packs are one-time, non-refundable payments that never auto-renew; see the refund policy.
1. Agreement and who we are
These terms are a binding agreement between you and the operator of MyRecon. By using the site or the app you accept them. If you do not accept them, do not use the service.
How we handle data is covered separately in our privacy policy and cookie policy, which form part of these terms.
2. Definitions
Service: the myrecon.xyz website, its lookup tools, the written guides and breach archive, and the MyRecon Android app.
You: anyone using the Service, and any organisation on whose behalf you use it.
Results: whatever the Service returns for a lookup, including data drawn from third-party public sources.
Target: the identifier you look up: a username, email address, domain, IP address or name.
3. Eligibility
You must be at least 18 years old, or the age of majority where you live, to use the Service. It is intended for adults and is not directed at children. By using it you confirm you meet this requirement and that nothing in law bars you from doing so.
If you use the Service for an employer or a client, you confirm you are authorised to accept these terms on their behalf.
4. What you may do
Subject to these terms, you may use the Service for your own lawful purposes, personal or commercial. The tools are free to start without an account. Guests can run Quick across 100 platforms, with the first 2 cards visible and the rest blurred. Standard requires sign-in. A free account opens 5 complete standard reports per day. The ₹99 plan includes unlimited standard scans. Paid Extended packs are described in section 12. You may quote and link to our written guides and breach articles with attribution.
We grant you no rights beyond that, and we reserve everything not expressly granted.
5. Acceptable use
MyRecon aggregates information that is already publicly available. It finds what is out there; it does not break into anything. Use it only for lawful purposes, which in practice means:
Reviewing your own digital footprint: the use we built it for.
Authorised security research: penetration testing, red teaming or reconnaissance you have written permission to perform.
Investigations you are permitted to conduct: journalism, due diligence, fraud and threat investigation, and similar work, within the law that applies to you.
Learning: understanding how exposed public data actually is.
Being public is not the same as being fair game. Data protection law applies to publicly available personal data in most places, including under the GDPR and India’s DPDP Act. If you process personal data you find here, you are the controller of it and the obligations are yours. That includes having a lawful basis, minimising what you keep, and securing it.
6. Prohibited use
You may not use the Service:
To harass, stalk, threaten, intimidate, dox or harm any person, or to help anyone else do so.
To build or contribute to a profile or dossier on a private individual without a lawful basis.
To discriminate: to make decisions about employment, housing, credit, insurance or education on what you find here. Results are not verified and are not a background check within the meaning of any consumer-reporting law.
To attempt to access, recover, compromise or monitor an account that is not yours, or to check credentials that are not yours.
To breach any platform’s terms of service, or any applicable law, regulation or court order.
To scrape, mirror, resell or redistribute the Service or its output in bulk, or to present it as your own product.
To automate access beyond the published rate limits, to circumvent those limits, or to run the Service as infrastructure inside another product without our written permission.
To attack, overload, probe or reverse-engineer the Service, except for good-faith security research reported privately to us first.
To upload or transmit anything unlawful, or malicious code.
You are solely responsible for how you use the information returned. We do not run investigations on third parties on request, and we cannot help you reach an account that is not yours. Requests of that kind are declined without exception.
If you are being harassed or impersonated, contact the platform involved and your local authorities. We can advise on gathering evidence about your own accounts, write to us.
7. Accuracy, and what results are not
Results are assembled from third-party public sources in real time. They may be incomplete, out of date, mistaken, or about a different person with the same name or handle. A username matching on a platform does not prove the same person owns both accounts, and an absence of results does not prove an absence of exposure.
Results are not: a background check, a credit or consumer report, a criminal-records check, an identity verification, legal advice, or evidence. Do not treat them as any of those. Verify anything that matters at its source before you act on it, and never take an adverse decision about a person on the strength of a MyRecon result alone.
The password checker tells you whether a password appears in known breach corpora. It is not an assessment of whether any particular account of yours is safe.
8. The breach archive and takedowns
Our breach articles and case files describe incidents that are already a matter of public record, drawing on published reporting, regulatory filings and breach databases including Have I Been Pwned, whose descriptions are used under a Creative Commons BY 4.0 licence and attributed on each page.
We publish no breached data itself: no credentials, no records, no dumps, and no links to them. Where a breach has not been formally attributed, we do not name a party as responsible.
If you believe something we have published is factually wrong, defamatory, infringes your rights, or discloses your personal data without a basis, write to aryan@bugsnaps.in with the page URL and what is wrong with it. We review these seriously and correct or remove what should be corrected or removed.
9. Intellectual property
The MyRecon name and logo, the site design, the software, and the written guides and articles are owned by the operator or licensed to us, and are protected by copyright and other laws. Material drawn from third parties, such as HIBP breach descriptions, remains theirs and is used under the licences noted on the page.
You may quote our written material with attribution and a link. You may not copy the Service wholesale, republish the archive, or use our name or logo in a way that suggests we endorse you.
10. Third-party sources and links
The Service queries third-party sources and links to third-party sites. We do not control them, do not endorse them, and are not responsible for their content, accuracy or practices. Their terms and privacy policies apply when you deal with them. A source going away, changing its rules, or blocking us can change or remove what the Service can return, without notice.
11. Availability and rate limits
The free tools are provided without any uptime commitment. We may change, suspend or discontinue any part of it at any time.
To keep it available for everyone, requests are rate-limited: by default 30 requests a minute per IP address. Exceeding that returns an error and asks you to slow down. Visitors who are not signed in can run 5 username scans a day. Automated or abusive access may be blocked without notice.
12. Accounts and Extended scan packs
Accounts. You can sign in with a Google account. Signing in is optional and free. Guests may run Quick across 100 platforms without sign-up, subject to the daily guest allowance. The first 2 result cards are visible and the rest are blurred. Standard requires sign-in. A free account can run 5 username scans per UTC day, shared across quick (100-platform) and standard (500+ platform) scans. Complete standard results require sign-in. The allowance resets at midnight UTC. The ₹99 plan unlocks unlimited standard scans. Username scans you run while signed in are saved to your account so you can reopen them; you can delete any of them, or all of them, at any time. Keep your Google account secure: anything done while signed in to it is treated as done by you. You can ask us to delete your account at any time by writing to the address in section 20.
Extended Scan Pack. The paid website plan includes unlimited standard scans, Deep Search and 10 Extended username scans across 3,000+ platforms each. Indian checkout is ₹99 through Razorpay, including any applicable taxes. International checkout, when available on the pricing page, is US$3.99 through PayPal or Buy Me a Coffee for the same pack. Review the provider's final total before paying. Sign-in is required to purchase, run Extended scans and view their results. Buy Me a Coffee buyers must paste the activation code from the pricing page into the Shop purchase question after payment and submit the answer.
Each pack is a one-time payment. Nothing renews automatically.
Buying again adds 10 more Extended credits to your account. Pack credits never expire, have no cash value and cannot be transferred.
Free accounts get 5 standard scans a day. Paid standard scans are unlimited, never consume Extended credits and remain unlimited after those credits are used.
An uncached Extended scan uses one credit when it starts. If it fails because of a fault on our side, the credit is returned automatically.
Reopening a saved report does not use a daily scan or an Extended credit. Cached standard requests count toward the daily free allowance. Cached Extended results require an available credit but do not spend it.
Payments are processed by Razorpay for Indian checkout or PayPal or Buy Me a Coffee for international checkout. We never receive or store your card, UPI or bank details. Access is applied after verified payment confirmation.
A pack buys scans, not guaranteed matches. Blocked, timed-out and inconclusive checks are shown as unknown.
Previously purchased passes retain their remaining Extended allowance and original expiry. Those expiring scans are used before non-expiring pack credits.
Purchases are final and non-refundable, except as set out in our refund and cancellation policy, which forms part of these terms. Future price or allowance changes do not alter credits already purchased.
13. The Android app
These terms cover the MyRecon Android app as well as the website. Your use of the app is additionally subject to Google Play’s terms, and the app is licensed to you, not sold.
The app runs its lookups from your own device, which means your device’s IP address contacts the platforms being checked. Use of the app is subject to the same acceptable and prohibited use rules above. The app carries advertising, including rewarded ads you may choose to watch; see the privacy policy for what that involves.
14. No warranty
The Service is provided “as is” and “as available”, without warranty of any kind, express or implied. To the maximum extent permitted by law we disclaim all warranties including merchantability, fitness for a particular purpose, non-infringement, and any warranty as to accuracy, completeness, reliability or uninterrupted availability.
Some jurisdictions do not allow the exclusion of certain warranties. Where that is so, the exclusions above apply to you only as far as the law allows, and nothing here removes a right you have that cannot be waived.
15. Limitation of liability
To the maximum extent permitted by law, the operator is not liable for any indirect, incidental, special, consequential, punitive or exemplary damages, or for loss of profits, revenue, data, goodwill or business, however caused and on any theory of liability, arising out of or relating to your use of, or inability to use, the Service.
This includes, without limitation, anything arising from your reliance on Results, from a third-party source being wrong or unavailable, and from anything anyone does with information obtained through the Service.
Where liability cannot lawfully be excluded, our total aggregate liability to you for all claims is limited to the greater of the amount you paid us for the Service in the twelve months before the claim, or INR 1,000.
Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be excluded.
16. Indemnity
You agree to indemnify and hold harmless the operator against any claim, liability, loss, damage, cost or expense (including reasonable legal fees) arising from your use of the Service, your breach of these terms, your violation of any law or the rights of any third party, or what you do with information you obtained through the Service.
17. Suspension
We may block, rate-limit or refuse access at any time, without notice, where we reasonably believe these terms are being broken or the Service is being used to harm someone. Where we suspend an account for a reason other than your breach of these terms, we refund the unused part of any paid pack or active legacy pass. Sections that by their nature should survive, accuracy, intellectual property, warranty, liability, indemnity and governing law, survive any such action.
18. Governing law
These terms and any dispute arising out of them are governed by the laws of India, without regard to conflict-of-laws rules. The courts at Gurugram, India have exclusive jurisdiction, and you submit to that jurisdiction.
If you are a consumer resident elsewhere, this does not deprive you of the protection of mandatory consumer-law provisions in your country of residence, or of the right to bring proceedings in your local courts where the law gives you that right.
19. Changes and general
Changes. We may update these terms. The date at the top changes when we do, and continued use after a change means you accept the updated terms. Check back when it matters to you.
Severability. If any provision is held unenforceable, it is severed and the rest continues in force.
No waiver. Not enforcing a provision is not a waiver of it.
Entire agreement. These terms, with the privacy, cookie and refund policies, are the whole agreement between us about the Service.
Assignment. You may not assign these terms. We may assign them as part of a transfer of the business.
20. Contact and grievances
Questions about these terms, reports of misuse, and takedown or correction requests all go to the same place, and a person reads them.
Aryan Walia: operator and Grievance Officer
Email: aryan@bugsnaps.in
Gurugram, India
The Grievance Officer is named under India’s Information Technology Rules. Complaints are acknowledged and answered as quickly as we can, and in any event within the period the law requires. See also our contact page, privacy policy and cookie policy.
MyRecon OSINT