PRIVACY

Privacy, in plain English.

We process what you submit to provide a scam assessment. You do not need an account.

What happens to submissions

Our app processes messages, links, and screenshots in memory and does not save raw submissions or make uploaded files public. Your browser keeps the assessment in temporary session storage so the result page can display it. When AI analysis is available, we send the submission to OpenAI to produce the result. We ask OpenAI not to store the response, but OpenAI may retain submitted content in abuse-monitoring logs for up to 30 days, or longer where required by law or to protect its services. If link checking is configured, we send pasted links and up to three links found in a message to Google Web Risk to check known threat lists. We do not open those links. When AI analysis is unavailable, a basic server-side check may identify some warning signs, but it cannot provide a full assessment. Screenshots return an unable-to-verify result.

Advertisements

The advertisement area on the result page is separate from the scam assessment. No advertising code loads until you choose “Show ad.” Your choice to show ads lasts for this browser tab’s session and can be withdrawn on a result page. If you choose to show it, an Adsterra banner loads in an isolated frame. Adsterra and its partners may receive your IP address, browser and device details, and ad interactions, and may use cookies or similar technology to deliver and measure ads. The frame cannot read your submitted message, link, screenshot, or assessment. Turning off ads stops the ad code but may not remove cookies already set. See Adsterra’s privacy policy and cookie policy for its practices. Browser settings can remove third-party cookies; an ad blocker may prevent ads from appearing.

What we do not do

We do not sell your submissions, use them to target ads, or use them to train our own models.

Operational data

The server temporarily counts requests by network address to limit abuse. Vercel may also process network information to enforce firewall limits. It does not log submitted content in application logs. Hosting providers may process routine network metadata.

Your choices

Remove passwords, Social Security numbers, full payment-card details, and other highly sensitive information before submitting. Do not submit information you are not authorized to share.

Security

Use this service over HTTPS. The app does not publish uploaded files. No automated assessment can guarantee legitimacy.

Contact

Questions about privacy or your submission? Email support@getextraeyes.com.