An email address or WhatsApp number identifies an account or contact route. It does not automatically expose the physical GPS location of the phone using it.
This article explains what is technically possible and how to protect yourself from misleading claims. It does not provide instructions for covert or unauthorized tracking.
Messaging apps can include features that let a person deliberately share a current or live location with selected contacts. That works because the person chooses to share location from their device.
Receiving a message from someone is not the same as receiving permission to query that person's location at any time.
Email systems contain routing metadata, but modern webmail often hides or centralizes much of the sender's network information. Even when an IP address is present, IP geolocation is not precise phone GPS and may refer to a provider or relay.
See Can you track a phone by IP address? for the practical limits.
A page that asks for somebody else's WhatsApp handle, email address or social username and then displays a fake 'locating' animation has not demonstrated access to the target device.
Never enter your own account password into an unrelated tracking site. If a service needs you to sign in, verify that you are actually on the official domain of the account provider.
LocationOf does not locate an arbitrary WhatsApp account or email address. The Android application must be installed on the tracked device and must have the required location permission.
A different problem is a message that claims a link will show somebody's location. Treat unexpected links cautiously. They may be phishing pages designed to steal an account login, request notification permission, install an app or collect your own IP address.
If a contact genuinely wants to share location, use the location-sharing feature inside the messaging or map service you already trust. Do not type your Google, WhatsApp or email password into a third-party 'tracker' page.
If you are trying to help a friend recover a lost phone, let that person sign into the official recovery service themselves—preferably in a guest or private session—and sign out afterward. Knowing their email address is not the same thing as being entitled to access their account.
An unexpected link claiming to reveal somebody's location may instead be a phishing page designed to steal a Google, email or messaging password, request intrusive browser permissions, install an application or simply collect your own IP address.
If a contact genuinely wants to share location, use the location-sharing feature inside a messaging or map application that both of you already trust. Do not type account credentials into an unrelated “tracker” website merely because it copied the branding of a familiar service.
If a friend has lost an Android phone, let that person sign in to the official recovery service themselves. On a borrowed computer, use a guest or private browsing session when practical and sign out afterwards. Knowing a friend's email address or telephone number does not make you authorized to access the account on their behalf.
LocationOf follows the same principle: the tracked Android device has to be deliberately configured. An email address may identify the LocationOf account, but it does not let an unrelated visitor query the GPS hardware in somebody else's phone.
Like other websites, a page you open can normally see the network address used for the connection. That still does not give the sender a precise GPS coordinate. Avoid suspicious links because of phishing and malware risk, not because every ordinary web link secretly turns into a live satellite tracker.