Learn more

Privacy

Last updated September 26, 2026

The homepage puts a first name in the /search URL, which reaches CheatAlert's Worker. Saving a draft sends its first name, age if entered, city, and optional username/platform to that Worker and CheatAlert's Postgres database. A dating-profile lookup starts only when you choose Run.

What you enter

A search can include:

  • First name
  • Age, if you add one, from 18 to 99
  • City
  • A public username, if you add one
  • A platform, if you pick one: Instagram, TikTok, X, Snapchat, Discord, or WhatsApp

Saving creates a server record and gives this browser an HttpOnly access cookie. A one-time recovery code can restore access after the cookie is cleared. Older browser-only drafts move to the server only if you choose Import. There is no account or payment attached to an anonymous draft.

Browser storage and recovery

Older drafts may still be in local storage until you import or delete them. New searches are stored in Postgres, while the browser holds an access cookie. Clearing browser data removes that access but does not delete a server record. Use its recovery code to restore access. Anonymous searches and reports expire after 30 days of inactivity; deletion requests can remove them earlier.

Account sign-in email

If you request an email sign-in link, your email address goes to our shared self-hosted Supabase Auth service and to Cloudflare Email Sending to deliver the link from no-reply@cheatalert.ai. The link is used only after you press Continue on the CheatAlert confirmation page. Signing in does not start a dating-profile search.

Backups and deletion

Deleting a search removes its live database record and any face still from private storage. Encrypted database backups are stored in private R2 with a 30-day lifecycle; the deletion journal has a 35-day lifecycle. A monthly isolated restore checks recoverability. Restricted manual snapshots made September 25 remain outside this automatic lifecycle, and their expiration has not been verified. A deleted record may persist in backups until those copies expire or are separately removed.

When a username leaves this browser

On the username step, after you type a handle of 2–50 letters, numbers, dots, underscores, or hyphens, the browser sends that username to CheatAlert. If you selected a platform, that choice is sent too.

For Instagram, TikTok, X, Snapchat, Facebook, LinkedIn, YouTube, Pinterest, Reddit, Twitch, Threads, Bluesky, Mastodon, and Tumblr, the site can request a public profile page and read the public title and image. Instagram requests pass through a private CheatAlert service because the site Worker cannot reach its public profile pages. That service receives the handle and returns only the title and image URL. Discord and WhatsApp have no public page in this preview, so those usernames are not fetched from those services. After a completed search, up to two supplied handles can be checked against other supported public profile URLs. A returned same-handle page is only a clue, not proof that it belongs to the person. Some profile hosts may require sign-in or refuse the request. The site does not sign in, and it does not receive a password.

Preview title and image metadata are cached in Worker memory briefly. Previewing does not run a dating-profile search. If you save, the username becomes part of the server search described above.

Public source checks and later features

When you choose Run, bounded first-name, city, and optional username queries go to Brave Web Search for indexed DateInAsia and Tinder pages. An exact Tinder handle check sends that profile URL to Tinder. CheatAlert stores validated public URLs, source checks, times, and possible-match signals. Age is not in Brave queries. Private or unindexed pages are outside coverage. Matching accuracy has not been measured against a consented cohort. The public price is not offered.

Account sign-in is available. Face upload, facial recognition, monitoring, and billing remain separate release gates. This deployment does not collect a face still or payment card, send alerts, or run background monitoring.

The person you look up

The person entered does not need an account here. Their submitted first name, age, city, and optional username are stored as described above. Enter adults only. A possible public URL is not proof of identity or relationship activity.

Contact

Use the form on the contact page for a removal, correction, privacy, or abuse request. The rules for using the site are on the terms page.