What We Can Hand Over to Law Enforcement
Your email address (DNS subscribers only) and a Stripe payment receipt. That is it. We have no DNS query history, no fax contents, no document text. We cannot produce what we do not have.
DNS Protection
- ✗ DNS query logs
- ✗ Browsing history
- ✗ IP address logs
- ✓ Queries processed in memory only
- ✓ Nothing written to disk
Harbor Fax
- ✗ Fax contents retained
- ✗ Destination numbers logged
- ✗ Cover page messages stored
- ✓ File deleted on delivery
- ✓ No account required
Career Tool
- ✗ Resume content retained
- ✗ Job descriptions stored
- ✗ Output documents saved
- ✓ Used to generate, then gone
- ✓ Not used to train AI
Harbor Scan
- ✗ Identifiers shared with anyone but the brokers you list
- ✗ Browsing or DNS data ever touched
- ✗ AI training on your records
- ✓ Only data you give us, only sent where you authorized
- ✓ Free scans: deleted 7 days after signup
- ✓ Paid plans: deleted within 30 days of cancellation
Harbor Scan is the one product where we deliberately do hold and transmit identifiers — that's the whole job. We never sell or reuse them. See the full breakdown in the privacy policy.
Harbor Help
- ✗ Ticket contents shared with anyone outside Harbor
- ✗ Used for marketing or analytics
- ✓ Auto-deleted 30 days after the ticket is closed
- ✓ Same nightly purge as the Scan deletion clocks
What We Actually Do Store
We believe in being straight with you about what does exist in our systems:
- Your email address, if you signed up for a DNS subscription
- Your Stripe transaction ID, amount, and timestamp (required for billing and tax records)
- Aggregate, anonymous page view counts via Umami (no individual tracking, no cookies)
What We Will Never Do
- Sell your data to anyone, ever
- Share your data with advertisers
- Log your DNS queries or browsing activity
- Retain fax documents or career documents after delivery
- Use your submitted content to train AI models
- Install tracking cookies or behavioral analytics on any Harbor Privacy page
Frequently Asked Questions
If you get a subpoena, what happens?
We comply with valid legal requests. But because we do not store query logs, fax contents, or document contents, there is nothing to produce. For DNS subscribers we can confirm an email address exists in our system. That is the extent of it.
How do I know my fax document is really deleted?
Our fax service deletes files in two places: immediately after Phaxio confirms delivery via webhook, and automatically after 30 minutes as a failsafe for any transmission that does not complete. The deletion is a hard filesystem removal with no backup or recovery path on our end.
Does Phaxio keep a copy of my fax?
Phaxio (Sinch) transmits your document to the destination fax machine and retains delivery metadata (status, timestamp, page count) for operational purposes. They do not retain document contents after transmission. See Phaxio's privacy policy for their full terms.
Why no Google Analytics?
Google Analytics tracks individual users across sessions and sites, builds behavioral profiles, and feeds that data into Google's advertising ecosystem. That is the opposite of what Harbor Privacy stands for. We use Umami, which counts page views without identifying anyone.
Is this policy legally binding?
Yes. This policy, along with our full Privacy Policy, constitutes a binding commitment to our users. If we ever change what we log or store in a material way, we will notify active subscribers by email before the change takes effect.
Questions?
Email us at privacy@harborprivacy.com. We read every message.