Not Covve Scan
What this checks
Cove is a leaked-data self-check at cove-scan.com. It is not Covve Scan, the business-card scanner. You run it on yourself. $9.99, one check, no account. Looking up someone else is blocked and voids payment.
Breach catalogs
Your email is sent to a public catalog (XposedOrNot) that returns incident names — LinkedIn, Adobe, Dropbox, and so on. That is the same job Have I Been Pwned is known for. Cove does not download stolen password dumps.
Password dump check
Optional. The password is hashed in this browser. Only a five-character prefix goes to Have I Been Pwned. If it hits, the report shows that password so you know which one to change.
People-search listings
Spokeo, Whitepages, BeenVerified, TruePeopleSearch, FastPeopleSearch, and similar. Cove gives you a “see your listing” link and the opt-out door. It does not scrape their paid reports.
Photo copies
GPS is read on this device. Reverse search uses the file on Reddit and public image indexes (Yandex). Adult hosts are filtered out. Self-check of photos you attach.
SSN
Optional, on step two, your number only. Quoted search on the public web. Not stored. Last four in the report, plus freeze / IRS IP PIN / SSA actions.