How scanning works
What Frame checks, why it only looks at details you own, and what happens to the results.
Only you, never someone else
Frame scans the details on your account and nothing else. Emails are confirmed with a 6-digit code first, so nobody can use Frame to look up another person. The agent follows the same rule: it searches for your own name, emails and usernames, and refuses to look up anyone else.
What Frame checks
- Breaches: known data breaches that include your email, and what each one exposed.
- Data brokers: Frame searches people-search and public-record sites for a listing with your name and where you live. When it isn’t sure a listing is you, it shows you a private picture of the page and asks “Is this you?”
- Accounts and usernames: where your handles appear on the sites Frame checks, and sign-ups tied to your email.
- Code and pastes: your email in public GitHub commits, paste sites and Doxbin.
- The open web: searches for your own name and identifiers, read in Frame’s own browser.
- Your connection: IP, DNS, WebRTC and IPv6 leaks, browser fingerprint, and email-domain spoofing (SPF, DKIM, DMARC).
Quick and Thorough
When you ask the agent to investigate, Quick runs the most useful tools and is the default. Thorough runs more of them for a deeper look with Frame’s strongest model. It comes with paid plans, and each Thorough answer counts as one message. Change the default in Settings → Frame → Default mode.
Where scans run
Web and broker checks run on Frame’s own scan server, which gets only the details it needs for one job at a time. If a check isn’t running yet, Frame tells you rather than showing an empty “all clear”.
Breach lookups
Frame checks your verified emails against its own infostealer logs, but full breach-database lookups aren’t live yet, and the Breaches screen says so. Meanwhile you can check your email on Have I Been Pwned. Frame only ever shows breach names, dates and the kinds of data exposed, never passwords or raw records. See Breaches.
What happens to results
The sensitive parts of results are stored encrypted, and results are kept for as long as you choose in Settings → Privacy and data → Data retention (12 months by default). See Your data and privacy.
Phone numbers
Verifying a phone needs a text-message service that isn’t set up yet, so phone numbers aren’t scanned for now.
Was this guide helpful?
Your answer isn’t stored or sent anywhere.
Still stuck? Contact us or check system status.