It records the address, the username typed and the outcome of every sign-in attempt, and of every sign-up it turns away. An IP address is personal data, so that is worth knowing rather than glossing over.
Nothing is sent anywhere — it is in your own database. The records are deleted automatically after the number of days you set, and suggested privacy-policy wording is added to Settings → Privacy for you to edit.
Visitors who never try to sign in leave no record at all.
Still stuck? Ask the developers who wrote it. We aim to reply within one business day.
Login Security
Stop the machines guessing at your passwords, and see exactly who has been trying.
From $19 a year · every feature · 30-day refund
