Frequently asked questions

General

What is CreepyCORE?

CreepyCORE is the cloud command center for OSINT workflows: dashboard, licensing, cloud scans, Device Hub, Platform API, billing, and Online Mode. It works alongside CreepyEYE desktop tools (Genesis, PRO, Titan) — it manages access and cloud features; local OSINT execution runs on your machine in CreepyEYE. Seeker, Spectre and CreepyEYE Titan are still in development and cannot be purchased or activated yet.

What is the difference between CreepyEYE and CreepyCORE?

CreepyEYE is the local/desktop OSINT app (Genesis, PRO, Titan licenses). CreepyCORE is the cloud hub: dashboard, devices, API keys, billing, and Online Mode. Genesis works offline; linking a CreepyEYE license unlocks device registration and advanced hub features. A CreepyEYE PRO license does not include CreepyCORE Platform API — that requires Hunter, Seeker, or Spectre. Seeker, Spectre and CreepyEYE Titan are still in development and cannot be purchased or activated yet.

Read the guide

Dashboard

What do the tiles on the Dashboard show?

License status, connected devices, and scan limits are all pulled live from your subscription and quotas. The Scan activity chart is driven by your actual scans over the last 12 months.

Open dashboard

Where do alerts come from?

Alerts are emitted by real events — login attempts, scan completions, device registrations, failed/successful billing, and subscription state changes. Open the Alerts sidebar to triage them.

Scans

What kinds of scans can I run?

Email, username, phone, domain, image, and social graph scans. Module availability depends on your plan — see the Customize Plan builder to preview exact costs.

Is there an HTTP API?

Yes. CreepyCORE API (Platform API keys, BYOK scans, OSINT jobs) is available on Hunter, Seeker, and Spectre cloud plans. Observer has no API access. Authenticate with a Platform API key (ck_live_*) or session JWT. Docs: Dashboard → API Console. Seeker, Spectre and CreepyEYE Titan are still in development and cannot be purchased or activated yet.

Devices

How many devices can I register?

Desktop device slots come from your CreepyEYE license edition: Genesis = 1, PRO = 3, Titan = 10. Manage activations in Dashboard → Devices. When the limit is reached, registration returns 403 (device_limit). Remove an unused device to free a slot, or upgrade your CreepyEYE edition. Seeker, Spectre and CreepyEYE Titan are still in development and cannot be purchased or activated yet.

Manage devices

Why does Register Device need a license?

A CreepyEYE license is what lets a device talk to CreepyCORE. Without one the server rejects the registration (`license_required`). Link a key in Store → Link license to account.

Where do I manage my license keys?

Dashboard → License shows linked CreepyEYE keys, edition, device slots used, and activation dates. You can also claim a guest-checkout key on guest-success.

Open license

Store

How does this store work?

CreepyEYE — desktop/local licenses (one-time purchase). CreepyCORE — cloud subscription (Observer, Hunter, Seeker, Spectre). Roadmap items are still in development; prices shown are indicative. Cart totals are validated on the server; the final price is confirmed at checkout (e.g. Stripe). Customize Plan adds optional scan modules using slots. Seeker, Spectre and CreepyEYE Titan are still in development and cannot be purchased or activated yet.

What does Customize Plan do?

It lets Hunter+ subscribers add or remove per-module quotas and storage on top of their base plan. Changes persist to your subscription and immediately reflect in Scan and API pages.

Open plan builder

I already have a license key — how do I link it?

Open Store → ‛Already have a license key?‾, paste it, and submit. The server validates the key and rate-limits wrong attempts (10/min per IP, 20/hour per user) to prevent brute forcing.

Go to store

API

How do I generate an API key?

On Dashboard → API → Keys tab, click ‛Create key‾, choose permissions + a daily limit, and copy the `ck_live_…` secret. It is shown exactly once — store it in your secret manager.

Open API keys

What rate limits apply to my API key?

Every key has a burst cap (60 req/min) and a daily quota that defaults to the limit you chose at creation. Exceeding either returns HTTP 429 with either `RATE_LIMITED` or `QUOTA_EXCEEDED`.

Can I test my API key without using credits?

Yes. `POST /api/v1/scan/preview` returns deterministic fixtures per module (username / email / phone / ip / photo) and never consumes scan credits — perfect for wiring a new integration.

My API calls fail after downgrading — why?

Platform API access requires an active CreepyCORE Hunter, Seeker, or Spectre subscription. On Observer, requests return API_ACCESS_DENIED until you upgrade to a paid cloud plan. Seeker, Spectre and CreepyEYE Titan are still in development and cannot be purchased or activated yet.

Billing

How do Observer, Hunter, Seeker, and Spectre differ?

These are CreepyCORE cloud subscription tiers. Observer (free) runs 10 cloud scans a day on the keyless modules — no Platform API. Hunter runs every live module (provider modules on your own API keys), adds the Platform API (ck_live_*) and ten times the daily scans. Seeker and Spectre are in development: more volume, scheduled scans, dark-web sources and team features. CreepyEYE desktop licenses (Genesis, PRO, Titan) are separate one-time purchases; Titan is in development too.

Can I cancel my subscription at any time?

Yes. Cancel from Settings → Billing. You keep access until the end of the current billing period, and we offer a 30-day grace window for failed payments before any downgrade.

How do crypto renewals work — can I switch between monthly and yearly?

A crypto payment always extends your subscription by its current billing cycle: a monthly plan renews by 1 month, an annual plan by 1 year. Because crypto payments can’t pull funds automatically, each renewal is a one-time payment that keeps the same cycle — to change between monthly and annual, start a new plan from the Store instead.

What happens if my card is declined?

You stay on your plan for 30 days (past_due state) while we retry the payment via Stripe. If payment is not recovered within the grace window, the account is downgraded to Observer and you get an email.

Where can I find my invoices?

Settings → Billing lists every invoice with amount, currency, status, and the date of the charge. You can also view receipts from the Stripe customer portal.

Open Billing tab

Accounts

Does CreepyCORE support two-factor authentication?

Yes. Enable TOTP in Settings → Security. We support any RFC 6238 authenticator (Authy, 1Password, Google Authenticator, etc.).

Can I sign in with Google or GitHub?

Yes. Connect OAuth providers from Settings → Security → Linked Accounts. You can unlink at any time as long as you still have a working password.

Why does Windows only offer my phone or a USB key for passkey sign-in, not Windows Hello?

CreepyCORE does not check whether "this PC" ever had your account. A passkey is stored locally on the device where you create it (Windows Hello, Touch ID, etc.). If you have not registered a passkey on this computer yet, Windows cannot offer Hello and shows other options. Sign in once with email/password, open Settings → Security → Add passkey on this device, and register one here. After that, Sign in with passkey will use Windows Hello. Passwordless passkeys are separate from passkeys used as a second factor (2FA).

Settings → security

Where is my profile page?

Account details, avatar, and personal info live under Settings → Profile (`/dashboard/settings/profile`). Billing and security have their own Settings tabs.

Open profile

Privacy

How long do you keep scan data?

Scan results are retained for the lifetime of your account unless you delete them. You can export or permanently remove any scan from the Scan History tab.

Is running OSINT scans with CreepyCORE legal?

CreepyCORE is intended for lawful and ethical use only — security research, authorized OSINT, and work on systems you may legally assess. Modules query publicly available sources where applicable. You must comply with applicable laws, platform terms of service, and privacy regulations (including GDPR where it applies). Unauthorized surveillance, harassment, or misuse may violate law and our Terms. See Terms of Service for full obligations.

Who do I contact about privacy or my personal data?

Email privacy@creepycore.com for access, correction, deletion, portability, or other privacy requests. For general support use support@creepycore.com; for security reports use security@creepycore.com. We aim to respond within 30 days.

privacy@creepycore.com