Privacy policy

What ScamSift processes

When you run a check, we process the public wallet address, website, URL, or domain you submit; the normalized identifier; the generated result; source-coverage details; check time; and a pseudonymous browser or account identifier used for allowances and abuse prevention.

If you use an account or Premium, we also process your email address, verification and session records, account identifier, and subscription status needed to provide access. Stripe processes payment details and provides us with customer, subscription, invoice, and payment-status references. ScamSift does not receive or store your full card number.

Why we process it

We use this information to deliver checks, enforce usage limits, maintain evidence and source integrity, operate subscriptions, provide support, prevent misuse, diagnose failures, and comply with legal obligations. We do not sell submitted identifiers or account information.

Public information is still sensitive

Blockchain addresses and domains are public identifiers, but they can sometimes be associated with a person. Submit only information you are entitled to use. Never submit a private key, seed phrase, recovery phrase, password, or unnecessary personal information.

Cookies and local identifiers

ScamSift uses essential first-party cookies to recognize an anonymous browser for daily usage limits and to maintain a signed-in session. Stripe-hosted pages may set their own necessary cookies under Stripe’s policy. The service does not use third-party advertising cookies.

Service providers and transfers

Account and session records are managed by open-source software in ScamSift’s database. Resend processes your email address and sign-in message to deliver a requested verification code. We also use infrastructure, domain-registration lookup, source-publisher, and payment providers. A domain submitted for live RDAP context is sent to the relevant registration-data service. Opening an external evidence link sends your request to that publisher. Providers may process data in countries other than your own under their applicable safeguards.

Retention and security

We retain check, allowance, evidence, and billing records only while reasonably needed for service operation, security, source integrity, accounting, dispute handling, and legal compliance. Retention can differ by record type. We use access controls and hosted payment pages to reduce exposure, but no online system can guarantee absolute security.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal data, and to receive a portable copy. You may also complain to your local data-protection authority. Contact support@scamsift.com to make a request; we may need to verify your identity.

Changes

Material changes will be reflected by updating the effective date and, where appropriate, providing an additional notice.