How we handle your data

This website

• No sign-up, no cookies, no ad tracking.
• The ransomware identifier and wallet check run only in your browser. Nothing you type is sent to us.
• Fonts are served by Google Fonts, so your browser connects to Google's servers to load them.
• The site is hosted on Cloudflare, which keeps basic access logs for security and attack protection.

Files and details you send us

• Sample files, ransom notes and contact details are used only to assess and handle your case.
• Samples are kept only during testing and recovery and deleted after delivery. You can ask us to delete them at any time.
• We never sell or share your files, data or contact details with third parties.
• We suggest testing first with a sample that holds nothing sensitive.

Crypto wallets

• We will never ask for your full seed phrase or private key. Anyone asking for your seed in our name is an impostor.
• Password recovery needs only the encrypted wallet file. Seed recovery is done on your own offline computer with our remote guidance.
• You must show you own the wallet before we start. If you can't, we won't take the case.
• We don't offer to recover stolen or scammed funds, and we don't give investment or financial advice.

Scope and disclaimer

• We only work for the lawful owner of the data or wallet. We refuse and stop any request that turns out to be unlawful.
• Recovery depends on the encryption and the state of the files, so not every case can succeed. If the test fails, you don't pay.
• Third-party decryptors listed here are made by their security vendors; we are not affiliated with them. Download them from the official site and back up your original files first.
• Identifier and wallet check results are a first guess; a real test is what counts.

Contact

For any privacy or deletion request, reach us through the contact details below.