Your Privacy Matters

01Data We Collect

We collect information in the following ways:

Information you give us directly

• Account registration: name, email address, and password (stored as a bcrypt hash — we never store plain-text passwords).
• Reviews and reports: the content you write, your star rating, and the subject (website, email, phone number, or crypto wallet) you are reviewing.
• Contact form submissions: name, email address, and the content of your message.

Information collected automatically

• Usage data: pages visited, search queries run on Scamora, and actions taken (e.g. writing a review, reporting a scam).
• Technical data: IP address, browser type, operating system, referring URL, and approximate geographic location (country/city level only — derived from IP).
• Cookies and local storage: session identifiers, preferences, and analytics data. See Section 4 for full details.

Information from security APIs

When you run a check on Scamora, we may query third-party security APIs (Google Safe Browsing, VirusTotal, Have I Been Pwned) with the URL, email, or identifier you entered. These queries are subject to each provider's own privacy policy. We cache API results for up to 24 hours to reduce repeat queries.

02How We Use Your Data

We use the data we collect to:

• Operate the Scamora platform and display trust scores, reviews, and reports.
• Create and manage your account, and authenticate your sessions.
• Send you account-related emails (password resets, review notifications, scam alerts you have subscribed to).
• Detect, investigate, and prevent fraudulent or abusive behaviour on the platform.
• Improve Scamora by understanding how people use it (aggregated analytics only).
• Respond to your support requests and contact form messages.

03Data Sharing

We share your data only in these limited circumstances:

• Public reviews and reports: Content you submit as a review or scam report is displayed publicly on Scamora. Your username is shown alongside your review. Your email address is never displayed publicly.
• Service providers: We use a small number of trusted providers to run the platform (hosting, email delivery, analytics). These providers process data only on our behalf and under strict data processing agreements.
• Legal obligations: We may disclose your data if required by law, court order, or to protect the rights and safety of Scamora users or the public.
• Business transfers: In the event of a merger or acquisition, your data may be transferred to the new owner. You will be notified by email if this occurs.

04Cookies

Scamora uses cookies and similar technologies for the following purposes:

You can disable cookies in your browser settings. Disabling the session cookie will prevent you from logging in. Analytics cookies can be disabled without affecting platform functionality.

05Security

We take reasonable technical and organisational measures to protect your personal data, including:

• All data transmission is encrypted via HTTPS/TLS.
• Passwords are hashed using bcrypt with a cost factor of at least 12.
• Access to production databases is restricted to authorised personnel only.
• Regular security reviews and dependency updates.

No method of transmission or storage is 100% secure. In the event of a data breach that affects your personal data, we will notify you by email within 72 hours of becoming aware of it.

06Data Retention

• Account data: Retained for as long as your account is active. If you delete your account, your personal data is deleted within 30 days. Public reviews may be anonymised rather than deleted to preserve their value to the community.
• Server logs: IP address logs are retained for up to 90 days for security purposes, then deleted.
• Contact form messages: Retained for up to 2 years for customer service continuity.
• Analytics data: Retained in aggregated, anonymised form indefinitely.

07Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate data be corrected.
• Deletion: Request that your personal data be deleted ("right to be forgotten").
• Portability: Request your data in a portable, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected] or use the contact form. We will respond within 30 days.

08Children's Privacy

Scamora is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete it promptly.

09Third-Party Links

Scamora contains links to third-party websites (including the websites and resources being reviewed). We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal information.

10Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered users by email. Continued use of Scamora after changes are posted constitutes your acceptance of the updated policy.

11Contact Us

For privacy-related questions or to exercise your data rights, contact us: