Free exposure check

Digital Footprint Checker: See What You Reveal Online

Your email address, phone number and old accounts leave traces across the internet. Run a free digital footprint scan to see which known data breaches your email appears in — and what to do next.

  • 800+ breaches checked
  • Email never stored
  • Instant result
  • Free, no account
Free breach check
Check your email against 800+ known data breaches
Instant result, no payment and no account. We check your email address against publicly known breach records and show you exactly what we find.
Your email is checked and discarded. We don't store it, log it, or send you anything.

TL;DR: Your digital footprint is everything about you that's visible or discoverable online — both what you posted yourself and what leaked, was listed, or was sold on without you noticing. You can check some of it yourself for free with Google and a breach database; an automated scan like Scan My Shadow covers far more ground in a few minutes.

Most people have never deliberately searched their own name, phone number, or email address the way a stranger might. When you do, the results can be surprising — old social profiles, forum posts, marketplace listings, or directories you forgot you were ever part of. Collectively, this is your digital footprint: the trail of information about you that's visible or discoverable online.

This page explains what that footprint is made of, what you can check yourself right now for free, and where an automated digital footprint checker like Scan My Shadow fits in — including what it does and does not claim to do.

The basics

What is a digital footprint?

Your digital footprint is the combination of information about you that exists online, whether you put it there yourself or someone else did. It's usually split into two kinds:

Active footprint

Information you knowingly shared — a LinkedIn profile, an Instagram account, a product review under your real name, a comment on a news article, a listing on OLX or Quikr.

Passive footprint

Information collected or exposed without a deliberate post from you — your email or phone number appearing in a company's data breach, your details listed in a data broker's directory, or your number showing up because you once filled out a form that got shared or sold on.

Why this matters

Passive footprint is the part most people underestimate. You can control what you post, but you can't fully control what a service you signed up for years ago did with your information afterward.

In practice

Active vs. Passive Footprint: What This Actually Looks Like

These aren't abstract categories — here's what shows up when you run a digital footprint check in practice:

A digital footprint checker's job is finding these specific, individually forgettable things — not one big dramatic exposure, but the accumulation. That's what makes checking worthwhile even if nothing feels obviously "leaked."

Real exposure

What can people find about you online?

The exact answer depends entirely on your own history online, but common categories include:

Example

A phone number used once to sign up for a food delivery app in 2019 can end up associated with that number in a later breach of that company's database — long after the person stopped using the app.

The two identifiers that matter most

Why your phone number and email matter

Your phone number and email address are two pieces of contact information that many accounts, forms, and online services ask for. Because they can appear across different online sources, they can be useful starting points for checking your own digital exposure — in fact, a phone number alone can reveal more about you than most people expect.

Unlike your name, which many people share, a phone number or email is usually unique to you — so if either one turns up somewhere unexpected, it's a strong signal worth investigating. Much of how it gets there in the first place comes down to how data brokers collect and resell contact details.

Do it yourself, free

How to check your digital footprint yourself

1
Search your own name and number
Search your full name, phone number, and email address individually in quotes on Google — quotes force an exact match instead of a loose one.
2
Check your major accounts
Review the privacy settings on LinkedIn, Instagram, and Facebook to see exactly what's visible to people who aren't your friends or connections.
3
Check a breach database
Use the free breach check at the top of this page to see whether your email appears in publicly known breaches. It returns how many breaches were found, when they happened and what type of data leaked, at no cost.

This manual approach is genuinely useful and costs nothing — but it's also slow, and it only covers what you think to search for. It won't catch listings you don't know exist, breaches that weren't widely reported, or directory sites that don't rank on the first page of Google.

If you want a broader automated check, Scan My Shadow checks your phone number and email across 1,500+ sources and returns the findings in one plain-language report.

Tools vs. manual search

What a digital footprint checker does

A digital footprint checker automates the search-and-compare process: instead of you manually Googling variations of your name, number, and email, the tool checks your details against a defined set of sources — breach databases, public directories, and indexed pages — and returns what it finds in one place. This is broadly the same idea behind OSINT (open-source intelligence) techniques used to piece together information about a person from what's already publicly available.

The value isn't magic; it's coverage and speed. A good checker can look through far more sources than a person reasonably would by hand, and it does so in minutes.

What no checker can promise

No tool, including ours, can search "the entire internet" or guarantee 100% accuracy. Coverage is always limited to the sources a tool actually checks, and results reflect what was publicly indexed at the time of the scan.

Our approach

What Scan My Shadow checks

Phone number scan
We check your phone number against 1,500+ sources including known breach records and publicly indexed listings for relevant matches.
Email address scan
We check your email address the same way — for appearances in breaches and public sources connected to it.
Plain-language report
Findings are compiled into one automated report emailed to you, without technical jargon, so you can understand what was found and why it matters.

Scan My Shadow is a one-time, $9.99 scan focused specifically on your phone number and email — we don't scan photos, and we don't ask for any other personal identifiers. The scan is consent-first: you check your own details, not someone else's.

If your main concern is one specific identifier, you can also explore the dedicated phone number exposure check or email exposure check.

Beyond the scan

How Google's Own Index Becomes Part of Your Digital Footprint

Not everything in a digital footprint check comes from a breach or a data broker — a meaningful part of it is simply what Google has already indexed and cached about you. Three specific mechanics explain why:

A quick manual check worth doing alongside any automated scan: search your own name in quotes on Google and watch what autocomplete offers as you type it — both surface index-level exposure that breach databases and data brokers don't touch.

Being upfront

What Scan My Shadow does NOT claim to find

Process

How the scan works

1
Submit your details
Enter your phone number and email and complete the $9.99 payment. No account or password needed.
2
We run the scan
Your details are checked against 1,500+ sources. This typically takes about 5 minutes.
3
Get your report
A plain-language report lands in your inbox. The phone number and email you submitted are deleted from our systems immediately after.
Reading the results

Understanding your report

Your report shows an overall exposure summary, followed by each specific finding — where it was found, and what kind of information it is (a breach record, a public listing, and so on). Where relevant, we include practical next steps, like requesting removal from a specific directory or changing a password tied to an old breached account.

If the scan finds nothing across the sources we check, you'll still get a report confirming that — it's a genuinely useful result, not an empty one.

Handling your data

Privacy and data handling

We only ask for what the scan needs: your phone number and email. There's no account creation and no password required. The phone number and email you submit are used to run the scan and generate your report, then deleted from our systems immediately after — we don't keep a copy.

FAQ

Frequently asked questions

Yes — the breach check is completely free, no sign-up. Enter your email and it checks instantly against known data breach records. For a fuller check across your phone number and email — 1,500+ sources including data broker and public-record listings, not just breaches — the paid Scan My Shadow report goes deeper.
Yes, in the sense that matters — it uses the same open-source intelligence approach professional researchers use: checking publicly available sources rather than anything private or behind a login. It's built to be usable without OSINT experience, not a replacement for manual investigative tools.
Most free checks only scan social handles or a limited public database. This one starts with a real breach check — backed by Have I Been Pwned's 800+ breach database — on your email, then a full paid scan across 1,500+ sources (breach records, data brokers, public records, Google Maps locations) for both phone number and email, not just one.
Active footprint is what you post or share directly — a social media update, a review, a forum comment. Passive footprint is what accumulates without a deliberate action on your part — old accounts, data broker listings, breach records. A digital footprint check needs to cover both, since most people only think to manage the active half.
Yes. Checking publicly available information connected to your own phone number and email is generally lawful. Scan My Shadow is built for consent-based checks of your own details.
Yes. The free breach check at the top of this page tells you instantly whether your email appears in publicly known data breaches, including how many breaches, when they happened and what types of data were exposed. The full breach list is in the paid report. You can also search your own name, number and email on Google. Both are free and a genuinely useful first step — they're just narrower than an automated scan across 1,500+ sources.
Yes. There is no payment, no account and no sign-up. Enter your email and the result appears immediately, showing how many breaches were found, what types of data leaked and part of the breach list. The complete list, with account names and locations, is in the paid report. Your email address is checked and discarded; it is not stored, logged or added to any list. Breach data is supplied by Have I Been Pwned. The paid scan is a separate, optional product that additionally covers your phone number and 1,500+ sources beyond breach databases.
No. The scan identifies where your phone number and email may be exposed and gives you a report. Removing listings, where possible, is a manual step you take afterward — our report can point you toward what to look for.
That's a genuinely good result — it means nothing relevant was found across the sources checked. It doesn't guarantee that no information about you exists anywhere online, since coverage is always limited to what a tool actually checks.
A background check typically compiles records like employment or criminal history from official databases. Scan My Shadow focuses specifically on where your phone number and email appear across breaches and public sources — it's a privacy exposure check, not a background check.
They're used almost interchangeably in practice. A digital footprint audit usually implies a more structured, sometimes manual review — going through each platform and account one by one — while a digital footprint checker like this one automates the discovery step across a defined set of sources. Many people use both terms to describe the same underlying activity: finding out what's publicly attached to your name, number, or email.
There's no fixed rule, but every few months is a reasonable cadence — new breaches get disclosed regularly, and old listings can resurface after a site changes hands or gets reindexed. Re-running the free breach check costs nothing, so there's no reason to wait for a specific trigger; running the fuller paid scan after any account-security scare, like a service you use reporting a breach, is a sensible additional check.
Not as a dedicated per-platform search. The scan checks your phone number and email against 1,500+ sources, which can include social profiles where either is publicly attached — but it isn't a reverse-username lookup for Instagram, Twitter/X, or similar. For a manual check of what's publicly visible on your own social accounts, reviewing your own profile's privacy settings directly is more reliable than any automated tool.
Go deeper

Related checks

Ready to check your own digital footprint?

A one-time scan of your phone number and email across 1,500+ sources, with a plain-language report in about 5 minutes.

Start My Scan · $9.99
No account needed · We don't store the number or email you submit