Privacy Policy

We only collect what we need to run the service:

• Account details — your email address and login credentials (handled by our authentication provider) if you create an account.
• Content you submit for analysis — messages, URLs, and screenshots you ask us to check. Analyzed message text (up to 5,000 characters), scanned URLs, and their risk results may be saved.
• Scam reports — the type of scam, the reported value (e.g. a phone number, URL, or account), any message content or screenshot, your description, and your language.
• Disclaimer acknowledgment — when you accept our disclaimer we record your IP address, browser user agent, language, and the disclaimer version, linked to your account or an anonymous ID.
• Data stored on your device — your language preference, an anonymous ID, and whether you have accepted the disclaimer are kept in your browser's local storage.

• To analyze content and tell you whether it looks like a scam.
• To show your scan history on your dashboard.
• To review community reports and publish approved ones in the scam database.
• To improve our detection and to keep a record that you accepted the disclaimer.
• To prevent abuse and keep the service secure.

To run the service, parts of your data may be processed by trusted third-party providers, each under its own privacy policy:

• Hosting and storage providers — database, file storage, and authentication.
• AI providers — models that classify messages.
• Threat intelligence services — check URLs against known malicious link databases.
• Translation providers — translate results into your chosen language.

Note that URLs submitted for scanning may be shared with security researchers through these threat intelligence services. Do not submit links containing personal tokens or passwords.

If an admin approves your scam report, the reported value (such as the scam URL or phone number) and its type are shown publicly. Your description and your identity as the reporter are never shown publicly.

We do not sell your personal data. We only share it with the service providers listed above, or when required by law.

We keep your data for as long as your account is active or as needed to provide the service. Approved scam reports may be kept to protect other users. You can ask us to delete your data at any time.

We use reasonable technical measures to protect your data, including encrypted connections and access controls. No system is completely secure, so please avoid submitting sensitive information such as passwords, PINs, or bank card numbers.

You may request access to, correction of, or deletion of your personal data, or object to how we process it. Email support@scamdetect.run and we will respond within a reasonable time.

ScamDetect is not intended for children under 13, and we do not knowingly collect their personal data.

We may update this policy from time to time. The "Last updated" date at the top will show when it last changed.