Privacy

This page describes how the current early-access version of ScamCheck AI handles information. It is a plain-language summary, not a finalized legal policy.

What happens to a message you paste

• The message is sent from your browser to this application’s own server endpoint for analysis.
• It is analyzed in memory by a rule-based engine that is part of this application. No third-party AI service is used.
• ScamCheck AI does not intentionally store, log, or share message contents or results. There is no database of messages.
• Links inside your message are never opened, visited, or followed.

What we can’t control

Like any website, traffic passes through infrastructure such as your network, browser, any installed browser extensions, and the hosting environment this app runs on. Those may keep their own records under their own policies. Avoid pasting information you don’t need to, such as full account numbers or passwords.

Basic abuse protection

To limit automated abuse, the server temporarily counts requests per network address in memory. These counts expire within minutes and are not written to disk or logged.

Language preference

If you switch languages, your browser remembers the choice in a cookie named “lang” (only the value “en” or “ru”). It is used only to show the site in that language, not for tracking.

Sharing

Copy buttons place text on your clipboard only. The WhatsApp, Telegram, and Share buttons open the app you pick with the text filled in. Nothing is sent until you choose a contact and confirm. The original message and its links are never included.

Accounts (only if you sign in)

Checking messages needs no account. If you sign in to buy a plan or invite friends, we store:

• your email address; with Google sign-in, only the email, not your name or photo;
• your invite code, whose friend code you entered, and how many people entered yours;
• how many free checks you have used (just the number, never the messages);
• your plan and when it renews, once payments launch (we never see or store card details: the payment provider handles them);
• a sign-in session: a cookie that keeps you signed in until you sign out.

Checked messages are never linked to your account or stored. This data is kept in a database at our hosting provider, and sign-in emails are sent by Resend. You can delete your account and all of this data from your account page.

Future changes

If a future version uses an external AI provider or stores any other data, that will be disclosed clearly before it is enabled.