Privacy Policy

How we handle your data — written in plain English, not legal jargon

🗓️ Last updated: April 2026
The short version

We do not sell your data. We do not require an account. We store only a truncated, anonymous version of submitted messages for the public scam database. No passwords, no tracking beyond standard analytics, no third-party advertising.

1. Who we are

Scam Checker is a free AI-powered scam detection tool operated by Zenikhon Tech. The tool is available at scam-checker.netlify.app. You can contact us at zenikhon@gmail.com with any privacy-related questions.

2. What data we collect

We collect the minimum amount of data necessary to operate the tool. Here is exactly what happens when you use the site:

DataWhat we collectWhyHow long
Submitted messageFirst 500 characters only, truncated and anonymisedTo populate the public scam database so others can learn from real examplesIndefinitely, publicly visible
AI verdictVerdict, confidence score, scam type, red flags, explanationStored alongside the truncated message in the public databaseIndefinitely, publicly visible
Community votesUpvote or downvote count per submissionTo indicate verdict accuracy to future usersIndefinitely
AnalyticsPage views, session data, general location (country/city level)To understand how the tool is used and improve itPer Google Analytics retention settings (default 14 months)
Email (contact only)Only if you email us directlyTo respond to your messageUntil resolved or deleted on request
⚠️
Never paste this into the tool

Do not submit passwords, bank account numbers, Social Security or ID numbers, full credit card numbers, or any other sensitive personal information. The first 500 characters of your submission are saved to a publicly visible database.

3. What we do NOT collect

4. Third-party services we use

To operate this tool we use the following third-party services. Each has its own privacy policy.

Groq (AI inference)

Your submitted message is sent to Groq's API to be analysed by the Llama 3.3 AI model. Groq processes the message to generate a verdict and does not store it for training purposes under their standard API terms. See Groq's privacy policy.

Supabase (database)

The truncated, anonymised submission and its verdict are stored in a Supabase PostgreSQL database hosted on AWS infrastructure. See Supabase's privacy policy.

Netlify (hosting)

The site is hosted on Netlify, which may collect standard server logs including IP addresses for security and performance purposes. See Netlify's privacy policy.

Google Analytics

We use Google Analytics (GA4) to understand how visitors use the site. This collects anonymised data including pages visited, time on site, and approximate geographic location. It does not identify you personally. You can opt out using the Google Analytics opt-out browser add-on. See Google's privacy policy.

ScamSearch.io (lookup feature)

If you use the Email/Phone Lookup tab, your search term is sent to the ScamSearch.io API to check their community database. See ScamSearch.io's privacy policy.

5. Cookies

This site uses minimal cookies. We do not use advertising cookies or third-party tracking cookies. The only cookies present are those set by Google Analytics for anonymous usage measurement, and standard session cookies set by Netlify's infrastructure for security purposes.

You can disable cookies in your browser settings at any time. Doing so will not affect your ability to use the scam checking tool.

6. The public scam database

When you submit a message for analysis, the first 500 characters along with the AI verdict, scam type, confidence score, and red flags are saved to a publicly visible database accessible via the Scam Database tab on the site.

This is intentional — it allows other users to learn from real scam examples. Before submitting, please ensure the message you paste does not contain any personally identifying information about yourself or others, such as your name, phone number, address, or financial details.

If you would like a specific submission removed from the public database, contact us at zenikhon@gmail.com and we will remove it promptly.

7. Your rights

Depending on where you are located, you may have the following rights regarding your data:

To exercise any of these rights, email us at zenikhon@gmail.com. We will respond within 30 days.

If you are located in the European Union or United Kingdom, these rights are granted under GDPR and UK GDPR respectively. If you are in California, you have additional rights under CCPA.

8. Data security

We take reasonable measures to protect the data we store. The database is hosted on Supabase with row-level security enabled. API keys and credentials are stored as environment variables and never exposed in client-side code. All connections to the site and its APIs are encrypted via HTTPS.

However, no system is completely secure. We recommend never submitting sensitive personal information through this tool.

9. Children's privacy

This tool is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal information through this tool, contact us at zenikhon@gmail.com and we will remove it immediately.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in how the tool operates or to comply with legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of the tool after a policy update constitutes acceptance of the revised policy.

Privacy questions?

If you have any questions about this privacy policy, want to request data deletion, or need to report a privacy concern, get in touch directly.

zenikhon@gmail.com