FreeUsername
Privacy Policy
Free, no sign-up. Checks 3,450+ sites; the username is not stored or logged.
Effective date: October 26, 2026
Service: the FreeUsername website (freeusername.com) and its username search
Operator: FreeUsername
Contact: [email protected]
Summary
FreeUsername checks whether a username has a public profile page on 3,450+ websites. There is no account. The site shows ads from Google AdSense to stay free (see section 4b), and the usernames you search are never used for advertising or shared with ad providers. Visits are counted with privacy-friendly analytics (see section 4a), and search terms are never included.
1. What is sent when you search
When you start a search, your browser sends the username you typed and the list of sites to check to our server. We use it only to run that check and send the results back to your browser. A few platforms let a browser check a username directly: TikTok, X, Kick, GitHub, Bluesky, SoundCloud, Chess.com, Mastodon and Telegram. For those, your browser asks the platform itself, as if you opened the profile. That platform sees your IP address, and the request does not pass through our server.
2. Not stored or logged by us
We do not store, log or keep the usernames you search or their results. They are not linked to you, not used for advertising and not sold or shared, apart from the websites and domain registries described in section 3. Results exist only in your browser tab, and exports (JSON or CSV) are created in your browser.
3. The websites being checked
To check a username, our server requests the public profile address on each selected website, so those websites receive the username as part of the address. They see the request coming from our server, not from your IP address. Each website's own privacy policy applies to what it receives. For Found results, our server also fetches the public profile page to show the name, avatar and bio. Avatars then load directly from the checked sites into your browser, so those sites can see your IP address. If you use the domain check, our server sends the name to the public RDAP registries for .com, .net, .org, .io, .us, .app and .dev to see whether it is registered.
4. Hosting and Cloudflare
The site runs on a server we rent and manage ourselves (a VPS). All traffic to it passes through Cloudflare, which handles DNS, caching and protection against attacks. Cloudflare and our server process your IP address and basic request details (browser type, time, page requested) to deliver the site, block abuse and apply a per-IP rate limit to the search. These details can appear in short-lived technical logs. Cloudflare handles this data under cloudflare.com/privacypolicy. The optional tools in sections 10 and 11 use a few other providers, described there.
4a. Analytics and error reports
Umami, on our own server. We count visits with Umami, a cookieless analytics tool we host ourselves at stats.freeusername.com. It records the page path, the referring site, the browser and device type and the country, and measures how fast pages load (Web Vitals). On pages other than the search page it also records clicks and scroll depth (heatmaps). Session replays are turned off. It also counts a few anonymous actions, such as whether a search was quick or full, roughly how many sites were found, and whether results were exported or the app link was tapped. Umami sets no cookies, does not store IP addresses and drops search strings, so it never receives the usernames you search, anything you type or result links.
AI features. Our AI buttons (FreeUsername AI) run on open-source AI models hosted by third-party AI providers in the United States, the European Union and Singapore. Each request goes to one or a few of them, whichever is available. Only what that button needs is sent: for username ideas and "find someone's username", the words you typed, the platform and the account type; for "variations", the username you searched; for bio ideas and the bio generator, the name, platform, tone and other choices and details you filled in; for the AI summary, the username and the public results already on your screen. We do not store or log any of it, but some free AI models may keep prompts to improve their service, so don't type anything private. Nothing is sent unless you press an AI button.
Ahrefs Web Analytics. We also count visits with Ahrefs Web Analytics, a cookieless tool from Ahrefs Pte. Ltd. Its script loads from analytics.ahrefs.com, but the data goes first to our own server, which removes everything after the page address (so a searched username in the address is dropped), keeps only the website of any link you click, and drops the tab title while a search runs. Ahrefs then receives the page path, the referring page's path, your browser language, screen size and the approximate location derived from your IP address. It sets no cookies. See the Ahrefs privacy policy.
Google Analytics 4. We also use Google Analytics 4 to count visits. It loads a few seconds after the page, and we send it only the page path and the page's fixed title, never the search string, so your usernames do not reach Google. Google signals and ad personalisation signals are turned on in our setup. Outside the EEA, the UK and Switzerland, Google Analytics can set the cookies listed in section 4c. In the EEA, the UK and Switzerland, analytics storage is denied by default: Google gets only cookieless pings unless you accept in the consent message. You can block Google Analytics with Google's add-on at tools.google.com/dlpage/gaoptout.
Error reports (Sentry). When something breaks, the site sends an error report to Sentry, hosted in the EU (Germany). A report holds the error message, the page path without its search string and the browser type. Personal data collection is turned off, Sentry sets no cookies for us, and it never receives the usernames you search.
4b. Advertising (Google AdSense)
To keep the site free, we show ads from Google AdSense (Auto ads). Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.
You may opt out of personalised advertising by visiting Google's Ads Settings at www.google.com/settings/ads. You can also opt out of some third-party vendors' cookies for personalised advertising at www.aboutads.info or, in Europe, at www.youronlinechoices.eu. For how Google uses this data, see How Google uses information from sites or apps that use its services.
Outside the EEA, the UK and Switzerland, ads can be personalised by default. In the EEA, the UK and Switzerland, ad cookies and personalised ads are off by default, and Google's consent message (Funding Choices, a Google-certified consent tool) asks for your choice first. Ads, the consent message and Google's ad-blocking recovery script are not loaded on the search page, where your usernames appear in the page address. The usernames you search and their results are never sent to Google or any other ad provider.
4c. Cookies
We set no cookies of our own. Your theme, language, view and recent searches stay in your browser's local storage (section 5). The cookies below come from Google. They can be set only on pages where ads or Google Analytics load, and in the EEA, the UK and Switzerland only after you consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Tells visits apart | 2 years |
_ga_DFWC8T4YGW | Google Analytics | Keeps the session state | 2 years |
__gads, __gpi | Google AdSense | Ad delivery, frequency capping and measurement | 13 months |
__eoi | Google AdSense | Ad security and fraud prevention | 6 months |
IDE | Personalised ads (set on doubleclick.net) | 13 months | |
FCCDCF, FCNEC | Google Funding Choices | Stores your consent choice | 13 months / 1 year |
Cloudflare may also set a short security cookie (__cf_bm, 30 minutes) to filter out bots. Google can change cookie names and lifetimes; its current list is at policies.google.com/technologies/cookies.
4d. Your privacy choices
To review or change your ad and analytics consent, use the button below. It reopens Google's consent message where one applies to your region. You can also delete this site's cookies in your browser, block third-party cookies, opt out of personalised ads at www.google.com/settings/ads, or install the Google Analytics opt-out add-on.
5. Stored on your device
The site keeps your theme, language and view choices, and your recent searches, in your browser's local storage. They never leave your device, and you can clear them at any time in your browser settings.
6. Your rights
Because we keep no search data, there is nothing for us to give you a copy of or delete. For any privacy question, email [email protected]; we answer within 30 days. If you are in the EEA or the UK, you can also complain to your local data protection authority.
7. Children
The service is intended for adults (18+) and is not directed at children.
8. The Android app
The FreeUsername Android app is available on Google Play. It works differently from the website: it checks usernames on your phone, it is free with ads, and it has its own privacy policy: freeusername.com/app/privacy.
Hadi Dev Lab acts only as the developer and publisher service provider for the apps (for example, it holds the Google Play developer account). It does not own the service and is not the data controller. The controller is FreeUsername and the FreeUsername team, contact [email protected].
9. Changes
If this policy changes, we will update this page and its effective date.
10. Email and phone tools (coming soon, not active yet)
The email and phone tools are optional and only run when you use them. We do not store or log anything you enter in them.
- Email check: our server sends only the domain (the part after the @) to public DNS resolvers to look up its mail servers, and compares it with a built-in list of disposable domains. It sends a SHA-256 hash of the address, not the address itself, to a public avatar service to see whether a public avatar or profile exists. If one does, the avatar loads directly from that service into your browser.
- Breach search: when this feature is turned on, our server sends the full email address to a third-party breach-data provider to list the known data breaches that include it. We do not store it.
- Phone check: the number is checked in your browser and does not leave your device. Only if you press "Look up carrier" (when available) does our server send the number to a phone-data provider to get the carrier and line type. We never look up who owns a number.
- Abuse limits: these requests are limited per IP address using short-lived counters in server memory that contain no email addresses or phone numbers. If bot protection is on, it applies here too.
11. Optional AI summary
If you ask for an AI summary of your results, our server sends the results already shown on your screen (the sites where the username was found and the public profile fields shown, such as name, bio and follower count) to an AI service provider to generate the summary. Nothing is stored by us.
12. Feedback form
If you use the "Report a problem", "Ask a question" or "Contact us" form, we store what you send on our server so we can answer: your message, your email address and name if you give them, the page you sent it from, and, for a result report, the site and the status shown. The username you searched is included only if you tick the box for it, which is off by default. We do not store your IP address or browser details with it. To check that the form is sent by a person and not a bot, it uses Cloudflare Turnstile, which processes signals from your browser under Cloudflare's privacy policy. To have a message deleted, email [email protected].