Privacy Policy

Updated 23 September 2026

Who operates this service

SafeOrScamCheck is operated by Martin Lesko. Use our contact form for privacy questions, access requests or deletion requests.

Checks and results

When you request a paid check, the URL or text is transmitted over HTTPS to our processing service. We do not store the raw input in our application database. We store a hash of the input, the warning signals, score, check type and time so a retry does not charge you twice and you can see recent checks. Results for links may include the registered domain name and its age.

A TXT or EML file is read on your device; its extracted text is sent for analysis. QR images and camera frames are decoded on your device. Only the decoded link is sent when you request a check. Camera access stops when you leave the scanner or hide the page. We do not open the scanned destination.

Credits and local storage

An essential random recovery code is stored in your browser to identify your credit wallet. The server stores a hash of that code, your balance, payment references and usage records. No email account is required to use credits. Keep the recovery code private and save it before clearing browser data. Pending input is stored temporarily in this tab so the check can continue after payment, then removed after success or when you start a new check.

Payments and support

Stripe processes checkout, including payment information and the email you provide there. We do not receive or store full card numbers. Our database records payment session identifiers, amounts, purchased checks and timestamps. If you contact support, we store your email and message to handle your request. Do not send passwords, recovery codes, full card numbers or identity documents.

Optional analytics

Only if you allow analytics, we record page paths, broad country, a temporary pseudonymous session identifier, visits and steps such as clicking Check, opening pricing and starting checkout. Scanned inputs, recovery codes and payment details are excluded. Country is estimated from the connection through our hosting provider and may be inaccurate with a VPN. We respect Global Privacy Control and browser Do Not Track for this optional collection. Change analytics choice

Service providers and purposes

Vercel hosts the website. Supabase processes requests and stores wallet, result and support records. Stripe handles payments. For a URL check we may send only the registered domain to RDAP registration services. These providers may process data outside your country under their applicable privacy and transfer terms. Hosting providers also process connection metadata, including IP addresses, for delivery and security.

We use data as needed to provide purchased checks and support, prevent abuse, maintain records required by law, and—when you consent—understand usage. We do not sell your personal information or use check contents for advertising.

Retention and your choices

Check history, optional analytics and support records are retained for service operation, support and usage review. Credit and payment records are retained as needed to provide purchased credits and meet applicable accounting and legal duties. You can ask us to remove data that is no longer needed. Infrastructure backups may persist until provider backup cycles expire. You can request access, correction or deletion through support; some transaction records may need to be retained by law. Where applicable, you may object, withdraw consent and complain to your data protection authority. Withdrawing analytics consent does not affect your purchased checks.