Privacy

What you send us

Only the address you choose to check. When you paste a whole message, your browser finds the links in it, and the message itself never leaves your device.

What we do with it

Our server opens the address and up to 7 more pages of the same site, then asks the sources named on How each check works: Google Web Risk receives the address, the registry and Cloudflare's DNS service receive its registered name, and in our test copy URLhaus and the Internet Archive receive the name too. The site you check sees our server, not you.

What we keep

• A 90-day check log. The registered address only (for example example.com, never the full link or a pasted message), the date, each check's result and a fingerprint of the page's text. Each entry deletes itself after 90 days. We use it to improve the checks and to spot copies of the same shop under other names. It holds no IP address.
• What you tell us. If you use the "Did you use this site?" form, we keep what you choose and write, with the registered address, for 12 months. Only we read it, and we never publish it. It holds no IP address.

We use no cookies, no analytics script and no advertising. This site loads nothing from other websites. Links to other sites (Trustpilot, Reddit, a web search, the bodies under "Who to tell") open only when you tap them, and those sites' own privacy policies apply there.

Your country

To show the right "Who to tell" list, our host tells our server which country your connection comes from. We do not keep it.

Who else is involved

Cloudflare hosts this site and runs the checks. Like any host, it processes your IP address to deliver the pages, under its own privacy policy.

Changes

If this changes, for example if we add analytics, this page will say so first.

Last updated: 29 October 2026.