Disclaimer & Scope

Last updated: 2026-06-26
LoginWatch is a strictly defensive monitor that uses passive, public data only. It is not a penetration test, not a security guarantee, and not legal advice. It helps your organization find and fix its own exposure — always verify findings with your own security team.

LoginWatch is operated by 9GG LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA, and is part of the 9gg.app product family. Questions about scope or this disclaimer: support@9gg.app.

Responsible use & scope (what LoginWatch does — and never does)

LoginWatch passively observes publicly available information about your organization's own internet-facing login/admin surfaces and reports the COUNT and age of employee emails appearing in known breach corpora. It is built for the org's own IT/security team monitoring its own domain. LoginWatch never attempts a login, never exploits or "hacks back" against any system, never performs intrusive scanning or brute-forcing, and never deanonymizes or targets individuals. It never stores, requests or displays any plaintext password or secret — breached-credential exposure is a count and age only. Use the Service only against domains and assets your organization owns or is authorized to monitor.

No professional advice or security guarantee

LoginWatch provides tools to map exposure, track remediation deadlines, and draft and dispatch remediation notices. Nothing in the Service, including AI-generated drafts, alerts or this website, constitutes legal, regulatory or professional security advice, and nothing in it guarantees that your systems are secure or that all exposure has been found. For advice about your specific obligations and risk, consult a qualified security professional.

Verify before you act

Public data can be incomplete, stale or ambiguous, and exposure changes constantly. You are solely responsible for verifying every finding with your own security/IT team and for performing the actual remediation (restricting a surface, rotating credentials, enforcing MFA, renewing TLS). Do not rely on LoginWatch as your sole source of truth.

No guarantee of accuracy or timeliness

We strive for accuracy, but we do not warrant that alerts, findings, calculations or drafted notices are complete, accurate, current or delivered on time. Email delivery depends on third parties and your settings. Outages, misconfiguration or data gaps can cause a missed notification or a missed exposure.

Your responsibility

Limitation of liability

To the maximum extent permitted by law, LoginWatch is not liable for any breach, intrusion, account takeover, data loss, downtime, regulatory liability, missed exposure or lost business arising from use of, or inability to use, the Service. See our Terms of Service for the full limitation of liability.