1. Saved checks stay in your browser
ScamAssessor's saved case history is stored in the browser you used. The browser keeps up to 50 saved cases. Trusted domains and your selected country or region can also be stored there.
Your information, explained simply
Privacy & data
What stays on your device? What may be sent to ScamAssessor? What happens to your account information? Here are clear answers, without technical language.
The important thing to know: Not every check happens only on your device. Some checks use the ScamAssessor server, and some optional technical checks may contact external services.
The short version
Three things to remember
2. Some checks use a server
Text and other submitted information may be processed on ScamAssessor's server to provide an analysis. File inspection can include limited checks performed in your browser.
3. Accounts are separate
Sign-in, subscription and billing information is handled separately from saved case history. Clearing browser data does not cancel a subscription or delete account records.
When you check something
Where can the information go?
The exact path depends on what you choose to check.
Your phone or computerWhat you select
A message, screenshot, email or downloaded file. Some checks happen locally.
ScamAssessor serverProcessing when needed
Submitted information may be analysed on the server. Do not assume everything stays in your browser.
Optional outside checksTechnical lookups
When enabled, some URL or domain information may be sent to reputation or domain-checking services.
Before submitting: Avoid including unnecessary passwords, card details or identity numbers. If possible, remove information that isn't needed to understand the suspicious request.
Payment privacy
Does ScamAssessor store my card or PayPal details?
No. ScamAssessor does not collect or store your full credit or debit card number, card security code (CVV), PayPal password, or the bank or card details linked to your PayPal account. Card and digital-wallet checkout takes place with Stripe, and PayPal subscription approval takes place with PayPal. Your sensitive payment details are provided to the chosen payment provider, not entered into ScamAssessor.
ScamAssessor retains the limited account and billing information needed to provide paid access, including subscription identifiers, transaction references, payment status and renewal details. These are not your card numbers, PayPal password or PayPal funding details. You can review your subscription from Account on the main ScamAssessor website.
Saved information
What can I remove from this device?
This browser may hold ScamAssessor saved cases, trusted domains and your selected region. You can clear that browser-saved information here. This does not clear server records or cancel subscriptions.
- You choose to clear the saved data.
- ScamAssessor asks for confirmation before removing it.
- The browser-stored ScamAssessor data is cleared on that browser.
- Your free-check entitlement, paid subscription and account records are not reset by this action.
Only saved ScamAssessor data on this browser is removed. Account and billing records are unaffected.
Common questions
Simple answers
Does ScamAssessor save every message I check?
Saved case history is kept in your browser, not uploaded as saved history. However, submitted content may still need to be sent to the ScamAssessor server for an individual analysis. Those are different things.
What if I use a different phone or computer?
Browser-saved history generally stays in the browser and device where it was saved. It should not be assumed to appear on another device.
Are the files I select always uploaded?
No. Some attachment inspection runs locally in your browser. Other types of analysis can involve the ScamAssessor server. A local file check is limited and is not a full malware scan.
Are links or domains checked by outside services?
They may be when external reputation or domain checks are enabled. Such a service may receive the URL or domain necessary for that lookup. This is different from sharing your saved case history.
Does ScamAssessor sell my saved case history?
ScamAssessor states that it does not sell or share saved case history. That history is stored in your browser. This does not mean that submitted information never reaches the analysis server or that technical lookups cannot contact outside services.
Does clearing browser data delete my account?
No. It does not delete your account, erase billing records, cancel automatic renewal or restore the one-time free check. Use the main ScamAssessor site for account and subscription management.
What does “private analysis mode” mean?
It's an existing server configuration that disables certain external network lookups. It does not mean all analysis stays on your device, and it should not be presented as a personal privacy switch for ordinary customers.
Being clear about our limits
What this page does not promise
This page explains the main privacy features in everyday language. It does not mean all processing stays on your device, or that clearing browser data removes account and billing records.
- It does not claim that all analysis happens on your device.
- It does not claim account or billing records are deleted by clearing browser history.
- It does not suggest that a low scam-risk score proves something is safe.
Formal privacy policy · Updated 20 October 2026
ScamAssessor Privacy Policy
Last updated: 20 October 2026
Service and developer: ScamAssessor, an independently operated Australian scam risk-assessment service
Privacy contact: support@scamassessor.com
Website: https://scamassessor.com/
Privacy policy
1. About this policy
This Privacy Policy explains how ScamAssessor handles information when you use its website and ScamAssessor Android app. The Android app displays the ScamAssessor web service, so the same analysis, account and browser-storage practices generally apply in both. Some payment and app-distribution processes differ between the website and Google Play.
ScamAssessor assesses suspicious messages, websites, email content, screenshots and selected files for possible scam warning signs. An assessment is not a guarantee that content is safe or fraudulent. Do not submit passwords, one-time codes, complete payment-card details, identity-document numbers or other sensitive information unless absolutely necessary; remove or obscure such details whenever possible.
Privacy policy
2. Information we handle
Information submitted for analysis. When you choose to check content, ScamAssessor may process pasted text, email text and headers, URLs and domains, images and screenshots, QR-code destinations, or information extracted from selected attachments. This information may contain personal information about you or other people if it appears in the material you provide.
Account and authentication information. If you register or sign in, we handle your account email address, information needed to verify your password and authenticate sessions, account status, and the information needed to administer your free check and paid access. We do not need you to send your password in a support email.
Subscriptions and payments. We handle plan selection, subscription status, renewal and expiry details, transaction references, and identifiers supplied by the payment provider. Website card and digital-wallet transactions use Stripe; PayPal subscriptions use PayPal. For purchases made through Google Play when that option is available in the Android app, Google Play handles payment processing. ScamAssessor does not collect or store full payment-card numbers, card security codes (CVV), PayPal passwords or PayPal funding details.
Information stored on your device. Up to 50 cases you choose to save, trusted domains and your selected country or region are stored in the browser on that device. Certain preferences and locally configured settings may also be retained there. Saved case history is not uploaded as a synchronised account history. Clearing browser-stored data does not remove your online account, payment history or subscription.
Technical and security information. Delivering the website and app involves processing technical connection information, which can include your IP address, request time, browser or device information, requested resources, and security or error events. Session information and browser storage may be used to keep you signed in and operate the service. Technical information is used for service delivery, troubleshooting, security, abuse prevention and reliability.
Support correspondence. When you contact us, we process your email address, the contents of your message and information needed to investigate your request. Do not email us passwords, full payment-card details or identity documents unless we have specifically explained a secure and necessary verification process.
Privacy policy
3. Where analysis happens
ScamAssessor uses a combination of checks in your browser and on its server. Browser-local checks can include extracting text from images, reading QR-code destinations without opening them, and limited inspection of certain PDF, Word, ZIP or other files. Local attachment inspection does not mean every ScamAssessor feature runs only on your device, and it is not a comprehensive antivirus or malware scan.
When you request a server-based assessment, submitted or extracted text, links and other information needed for that assessment may be transmitted securely to ScamAssessor's server. Saved case history, as a separate browser-history feature, is not uploaded as a synced case archive.
Optional external technical checks. When network-based threat or domain checks are enabled, relevant URLs or domains and related lookup data may be passed to external reputation, DNS, domain-information or redirect-checking services. Those services may also receive technical connection information necessary to process a request. ScamAssessor's private analysis mode disables certain optional external checks; it does not make all server analysis local to your device.
AI-assisted analysis. When ScamAssessor is configured to use OpenAI and private analysis mode is not enabled, submitted text and any screenshot supplied with the request may be sent to OpenAI for additional analysis, including during a normal assessment. This is controlled by server configuration, not a separate customer opt-in setting. Remove or obscure unnecessary sensitive information before submitting content. OpenAI handles information it receives under its applicable terms and privacy practices.
Privacy policy
4. Why we use information
We use the information described above to deliver scam-risk assessments and explanations; create and secure accounts; apply free-check and subscription entitlements; process and reconcile purchases and renewals; send account, billing and expiry notices; answer support and account-deletion requests; investigate misuse; and maintain service performance and security. We limit handling to the purposes necessary for these functions and other lawful, clearly disclosed purposes.
We do not sell personal or sensitive user information. We do not sell or share your browser-saved case history as a stored case archive. This does not mean that analysis submissions or technical lookups never reach ScamAssessor's server or the providers described in this policy.
Privacy policy
5. Service providers and disclosures
ScamAssessor uses service providers to operate its functions. Depending on how you use the service, these may include:
- DigitalOcean, for website/server infrastructure and hosting;
- Stripe and PayPal, for website payments, subscription processing and related transaction events;
- Google Play, for Android app distribution and Play-managed subscriptions, when used;
- Resend, for service-related account, subscription and billing emails;
- Porkbun for the business support mailbox, with support copies handled through a Google-hosted Gmail mailbox;
- external URL, DNS, registration and threat-reputation services for optional technical lookups; and
- OpenAI, for AI-assisted analysis when enabled in ScamAssessor's server configuration and private analysis mode is off.
These parties receive only information relevant to the service they perform, although their own processing may also be governed by their privacy policies. We may disclose information when legally required, to protect the service or users from abuse, or in connection with a lawful business transfer with appropriate safeguards and notice where required. Service providers may process information in countries outside Australia.
Privacy policy
6. Security
ScamAssessor uses HTTPS to protect information transmitted between your browser or app and the service. We use authentication, access restrictions and operational safeguards appropriate to the service. No internet service can guarantee absolute security. Use a unique password, sign out of shared devices, and remove unnecessary sensitive details before submitting material for analysis.
When you select an image, email or document through a device file picker, ScamAssessor accesses the item you choose to perform the requested check. Permissions needed by particular features are requested through applicable device or browser controls.
Privacy policy
7. Retention and browser controls
Saved cases and preferences: Browser-saved cases (up to 50), trusted domains and the selected region remain on that browser/device until you clear them, the browser removes them or they are replaced under the saved-case limit. You can remove them through ScamAssessor's Privacy & Data controls.
Submitted analysis content: Material is processed for the requested assessment. It is not automatically saved as your account's synchronised case history. Technical events or operational logs may contain information related to a request; these are kept only for operational, security and lawful purposes, rather than as a permanent personal case archive.
Account and access records: Account information, authentication and subscription state are retained while necessary to operate your account and associated access. When a verified account-deletion request is fulfilled, associated personal records are deleted unless a legitimate retention ground applies.
Payment and transaction records: Limited transaction, tax, accounting, dispute-prevention and fraud-prevention records may need to be retained after account deletion for applicable legal or legitimate operational obligations. Such records are retained only as long as required for those purposes, then removed or de-identified as appropriate.
Support messages and security records: These are kept for as long as reasonably needed to handle the inquiry, protect the service, resolve disputes and satisfy applicable obligations, and removed when no longer needed. Specific retention requirements can vary by record type and applicable law; contact us for information relevant to your request.
Clearing local browser data does not cancel subscriptions, restore your one-time free check or delete server-side account, transaction or security records.
Privacy policy
8. Account deletion and other privacy requests
You can request deletion of your ScamAssessor account and associated personal information by emailing support@scamassessor.com. Include the email address registered to your account, but do not include your password or payment-card information. We will take reasonable steps to verify ownership before processing a request. An account-deletion pathway must also be available in the Android app and through a publicly accessible deletion resource when the app is released.
Once ownership is verified, we will review active subscriptions, delete the account and associated user data that are not subject to a legitimate retention requirement, and explain what is retained and why. Deactivation or loss of access alone does not count as account deletion. Where applicable, we will address deletion requests involving data held by service providers.
Deleting an account is not itself a guarantee that recurring billing with Stripe, PayPal or Google Play has been cancelled. If you have an active subscription, identify it in your request so that cancellation and final billing can be handled through the relevant provider before the deletion is finalised. We will provide guidance and a support path for that process.
You may also contact us to request access to, correction of or deletion of information where applicable law provides those rights, or to ask about a particular category of data or retention practice. We will respond within a reasonable period and in accordance with applicable law.
Privacy policy
9. Children and international users
ScamAssessor is a general scam-awareness and assessment service, not specifically designed for children. If its audience or child-directed functionality changes, we will review applicable Google Play Families and child privacy requirements before release.
Users may access ScamAssessor from outside Australia. Data may be handled through service providers operating internationally. If your jurisdiction gives you additional privacy rights, please contact us through the support address above to exercise them.
Privacy policy
10. Changes and contact
We may update this Privacy Policy as ScamAssessor's features, providers or legal obligations change. We will publish the updated wording and date on the website. Significant changes affecting personal data handling may require additional notice or consent under applicable law.
Privacy inquiries and account-deletion requests: support@scamassessor.com
ScamAssessor website: https://scamassessor.com/
Browser-local privacy controls: Privacy & Data
Ready to check something?
Go back to the main ScamAssessor website to start a check or view your real account and subscription status.