Privacy Policy

CoreLab is a network diagnostics and API service operated by Mochaziz. This policy explains how we process information when you visit the site, create an account, or run a check.

1. Account and sign-in information

We process your name, email address, verification status, and profile picture when available. Signing in with Google provides account identity and basic profile information to create or connect your CoreLab account. This sign-in integration does not request access to your Gmail messages, Google Drive files, contacts, or calendar.

Our authentication system may store your Google account identifier and tokens received during sign-in. For email and password accounts, passwords are stored as hashes. Session information may include your IP address, browser information, sign-in time, and session expiry.

2. Usage and diagnostic information

• Tool and API usage: operation type, timestamp, usage units, outcome, request identifier, and account quota.
• API keys: key names, key material protected by the authentication system, status, usage information, and expiry.
• Diagnostic inputs: domains, IP addresses, ports, email addresses, and other information you submit to use a feature.
• SMTP and SSH features: connection details, credentials you provide, commands, and connection responses needed to carry out your requested actions.
• Email monitoring: verification codes, email addresses, and notification or webhook data received by that feature.

Account usage records are separate from complete diagnostic results. Operational logs may contain target addresses, email addresses, or error details. Do not submit sensitive information that is unnecessary for a check.

3. How we use information

We use information to provide sign-in and dashboard access, run diagnostics, send authentication emails, calculate quota, secure the service, address misuse, and troubleshoot problems. Google account data is used for authentication and CoreLab account management.

4. Cookies and sessions

CoreLab uses authentication cookies to keep you signed in and support a secure sign-in process. Disabling these cookies may prevent sign-in or dashboard features from working. You can sign out and revoke other device sessions through your account settings.

5. Other services that receive information

Google sign-in involves Google. Authentication emails involve the SMTP provider configured for CoreLab. Hosting, database, cache, and reverse proxy infrastructure process information to operate the service.

Network checks contact DNS resolvers or target servers; index checks send domain queries to Google. SMTP and SSH features contact servers you specify. Those parties may receive request information and have their own privacy policies.

CoreLab does not sell personal information or Google account data. Information may be disclosed when needed to meet legal obligations or address misuse of the service.

6. Retention and deletion

Account and usage information is retained as needed to operate the service, maintain security, and resolve issues. The dashboard shows 30 days of usage history; this does not mean older records are automatically deleted. Log and backup retention depends on operational settings.

To request access, correction, or deletion of account information, contact [email protected] from the associated email address. We may verify account ownership before processing a request. Some information may need to be retained for security or legal obligations, and backup copies may remain until their retention cycle ends.

7. Your choices and account security

You can update your name, change your password where supported, revoke API keys, and end other device sessions from the dashboard. You can also revoke Google access in your Google account settings; this does not automatically delete your CoreLab account.

Keep passwords and API keys private. Contact the operator if you suspect unauthorized access. No storage or communication system can be guaranteed completely risk-free.

8. Changes to this policy

Changes will appear on this page with an updated date. Where needed, we will communicate significant changes to how information is used through the service or your account email.