Subprocessors
Every third party that receives data from pigfox.com, and exactly what reaches them. Last updated 2026-08-03. This list is generated from the services the code actually calls, so it cannot quietly fall behind what the site does.
Named recipients
| Recipient | Why | What leaves |
|---|---|---|
| OpenAI | Language-model analysis for the AI tools | The text you paste into the job-offer check, timeline check, counter-offer script, or keyword generator |
| SerpAPI | Reverse-image search (routed to Google Lens) | A photo you upload to TraceCheck or the candidate-photo check, fetched over a short-lived link |
| Serper | Public web search | The name and claimed role you enter into TraceCheck, as a search query |
| Have I Been Pwned | Breach exposure lookup | The email address you enter into the breach check or counterparty check |
| SSL Mate (Cert Spotter) | Certificate-transparency lookup | The domain you enter into domain recon or the certificate subdomain finder |
| ipapi | IP geolocation | A visitor IP address |
| Cloudflare | Turnstile bot challenge on forms | A challenge token and the IP address that solved it |
| Brevo | Transactional email | Your name, email address and message when you use the contact form; your email address for sign-in links |
| SendGrid | Internal error alerting | Diagnostic messages about failures, which can quote the request that failed |
| Stripe | Payments and subscription billing | Your email address and payment details, which are entered on Stripe's own form and never reach our servers |
| Google Tag Manager | Loads the analytics tag | Your visit: page URL, referrer, device and browser characteristics |
| Google Analytics | Traffic measurement | Your visit: page URL, referrer, device and browser characteristics |
| Outstand | Publishes our own blog posts to social channels | Our published posts. No visitor data |
Username-presence platforms
The username checker and the cross-platform username check work by asking each platform below whether a profile page exists. Running one of those checks discloses the username you entered to every platform in this list. The probes read only whether the profile URL resolves — they never read profile content.
- GitHub
- GitLab
- Dev.to
- npm
- PyPI
- Replit
- Keybase
- Hacker News
- CodePen
- Kaggle
- Gravatar
- Medium
- Behance
- Dribbble
- SoundCloud
- Patreon
- Product Hunt
- Telegram
- Twitch
- About.me
Hosts you submit yourself
Several tools — domain recon, the SSL certificate checker, the redirect tracer, the security-headers grader, the AI-access checker, the OG preview checker, the website legitimacy check and the cognitive-load analyzer — take a URL or domain from you and fetch it.
That necessarily discloses the address you submitted to the host you named, and to the DNS resolvers used to reach it. There is no way to check a host without contacting it. We cannot list those hosts in advance, because you choose them.
Where nothing goes
The phishing analyzer, the email-header analyzer, the prompt-injection tester and the document-authenticity scan involve no third party at all. They run in our own process and reach no network.
Contact
Pigfox LLC, 1450 Vassar St, Reno, NV 89502. Questions go through the contact form.