Privacy Policy

Account information: your email address, display name, and password (stored as a secure hash — we never store your password in plain text). If you sign in with Google, we receive your name, email address, and profile picture from Google.

Content you submit: scam reports, evidence files (screenshots, documents, URLs), comments, and votes. Published reports are visible to the public along with your display name.

Usage data: pages visited and report view counts, used to show statistics such as report popularity.

Cookies: we use cookies to keep you signed in and to remember your language preference. We do not use advertising or cross-site tracking cookies.

To operate the platform: publishing verified reports, displaying your display name beside your contributions, and notifying moderators of pending submissions.

To moderate content: our moderators review every report and piece of evidence before publication, and keep an audit log of moderation decisions.

To protect the community: rate limiting, abuse prevention, and investigating accounts that submit false or malicious reports.

When a report you submitted is approved, its title, description, category, scammer contact details, amount lost, incident date, and your display name become publicly visible.

Your comments and approved evidence are public alongside your display name.

Your email address is never shown publicly.

We do not sell your personal information.

We may share information with law enforcement agencies in Sri Lanka when required by law, or when a report relates to an active criminal investigation.

We use trusted infrastructure providers (such as our hosting and database providers) that process data on our behalf.

Published reports are retained indefinitely as a public record to protect the community, unless removed by moderators.

If you delete a comment, its content is removed from public view.

You may request deletion of your account by contacting us; published reports may be retained in anonymized form.

You can access and update your profile information at any time from your profile page.

You may request a copy of the personal data we hold about you, or request correction or deletion, by contacting us at privacy@scamalert.online.

Passwords are hashed with industry-standard algorithms. All traffic is encrypted in transit. Access to moderation tools is restricted to vetted moderators, and every moderation action is logged.

We may update this policy from time to time. Material changes will be announced on the platform. Continued use of ScamAlert after changes take effect constitutes acceptance of the revised policy.

For privacy questions or requests, contact privacy@scamalert.online.