Privacy
Privacy Policy
This page is maintained by the ScamWatch operator to explain how the service handles data.
What we collect
- Analyst account: email address and authentication identifiers used to sign in.
- URLs and hostnames submitted for scanning, plus the technical evidence gathered from them (HTML, DNS, WHOIS, redirects, form targets).
- Public threat intelligence ingested from third-party feeds (URLhaus, OpenPhish, PhishTank, Phishunt, PhishingDatabase, Certificate Transparency).
- Standard server logs (request time, IP, user agent) for security and abuse prevention.
What we do not collect
We do not sell personal data. We do not run third-party advertising trackers.
Data retention
Threat-directory records are retained indefinitely for research and takedown purposes. Analyst accounts are removed on request.
Your rights
To request access, correction, or deletion of personal data, or removal of a mistakenly-listed site, email xapp431@gmail.com.