Privacy Policy

Scamers.org Foundation is a Delaware 501(c)(3) nonprofit corporation operating scamers.org. We are the data controller for information collected through this website. Our registered address is:

Privacy inquiries: privacy@scamers.org

Information you provide directly

• Scam reports: When you submit a report, we collect the details you provide (scammer identifiers, description, evidence). Reporter email addresses are stored privately and never displayed on public pages.
• Account data: If you create an account, we store your email address and a securely hashed password. We do not collect real names, phone numbers, or addresses unless voluntarily provided.
• Removal requests: When you use our "I'm Innocent" process, we collect contact and identity-verification information to process your request.

Information collected automatically

• IP addresses: Hashed and used for abuse prevention (detecting spam bots and fraudulent submissions from the same source).
• Browser & device: User-agent string, screen size, and language preference — used for analytics and optimizing site performance.
• Usage data: Pages visited, search queries, clicks — aggregated for improving search relevance and site features.

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for site functionality (session management, CSRF protection, spam prevention via Cloudflare Turnstile). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site so we can improve search quality and content. These are opt-in and respect Do Not Track signals.
• Authentication cookies: If you create an account, cookies keep you signed in securely.

You can manage cookie preferences through your browser settings. For more details, see our cookie settings panel (available from the site footer).

• Operate the service: Display scam reports, enable search, process submissions, and moderate content.
• Security: Detect and prevent spam, abuse, and fraudulent submissions.
• Improvement: Analyze aggregated usage patterns to enhance search algorithms and user experience.
• Communication: Respond to support requests, removal appeals, and legal inquiries.
• Legal compliance: Fulfill obligations under applicable laws and regulations.

We do not sell your personal data. We do not share personally identifiable information with advertisers, data brokers, or third parties for marketing purposes.

We share data only in the following limited circumstances:

• Service providers: Cloud infrastructure (hosting), spam prevention (Cloudflare), and email delivery — all bound by strict data-processing agreements.
• Legal requirements: When compelled by valid legal process (subpoena, court order) or to protect our rights, safety, or the safety of others.
• Aggregated / anonymized data: Statistical summaries that cannot identify any individual user.

• Scam reports: Retained indefinitely as part of the public database, unless the reporter requests removal and the request is approved.
• Account data: Retained until you delete your account. You may request deletion at any time.
• IP hashes: Rotated and purged periodically (typically 90 days) after abuse-detection value expires.
• Server logs: Retained for 30 days for debugging and security, then automatically deleted.

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: Withdraw consent for optional data processing at any time.

To exercise any of these rights, email us at privacy@scamers.org with the subject line "Privacy Rights Request." We respond within 30 days.

We implement industry-standard security measures to protect your data:

• TLS/SSL encryption for all data in transit.
• Passwords hashed using bcrypt with appropriate work factors.
• IP addresses hashed before storage; raw IPs are not retained.
• Row-level security (RLS) on database tables to enforce access controls.
• Regular dependency audits and security scans.

scamers.org is operated from the United States. If you access the site from outside the U.S., your data will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms for data originating from the EEA, UK, and Switzerland.

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately at privacy@scamers.org so we can delete it promptly.

We may update this privacy policy to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the revised policy on this page and update the "Last updated" date. Material changes will be notified via a prominent site notice or email to registered users.

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact:

Scamers.org Foundation
Email: privacy@scamers.org
Address: 16192 Coastal Highway, Lewes, Delaware 19958, USA

Last updated: June 6, 2026