Privacy

Privacy policy

Last updated September 2026.

What we collect

Account data you provide: email address, display name (handle), and a password hash when you register, plus optional profile details such as an avatar.
Content you publish: reports, evidence uploads, comments, chat messages, votes, and watchlist entries.
Evidence you submit: screenshots, documents, and other files you choose to upload in support of a report.
Coarse telemetry: session tokens, rate-limit counters, and request metadata such as an IP-derived hash and user agent used only for security, abuse prevention, and service reliability.
Public safety lookups may send non-sensitive lender or domain signals to an automated analysis provider. Never enter passwords, OTPs, bank details, or other private information.

We will never ask for, collect, or store access to your phone contacts, SMS, call logs, photos, media, microphone, or location.
Our apps and web pages do not request device permissions to harvest your address book or files.
If any tool or partner claims otherwise on our behalf, report it immediately through the contact page.

We never sell, rent, trade, or otherwise monetize your personal data.
We do not share personal data with data brokers, advertisers, or credit bureaus.
Sponsorship and advertising are separated from personal data; sponsors receive only aggregated, non-identifying reach statistics, never individual records.

Most features work with a pseudonymous identity — no email required.
Anonymous handles are random and carry no profile beyond what you post.
Claiming an anonymous identity into a registered account preserves your history under your control.
We design public surfaces to show your handle and content, not your real identity.

Reports and votes feed public profiles and caution scores after moderation.
Flagged or rejected content may be retained briefly for abuse investigation, then excluded from public surfaces.
Aggregated, non-identifying statistics may be published for transparency and for sponsorship reporting.

Right to be informed — you may ask how your personal data is being processed.
Right to access — you may request a copy of the personal data we hold about you.
Right to correct — you may have inaccurate personal data rectified.
Right to erasure or blocking — you may request deletion or blocking of personal data, subject to lawful retention and the rights of others.
Right to object, to data portability, and to lodge a complaint with the National Privacy Commission (NPC).
To exercise any of these rights, contact our Data Protection Officer through the contact page. We respond within the timelines required by law.

Our Data Protection Officer (DPO) oversees compliance with RA 10173 and the implementing rules of the National Privacy Commission.
Reach the DPO through the contact page with the subject 'Data Privacy Request' for access, correction, or deletion. We may ask for reasonable proof of identity before acting on a request.

Sessions are signed, stored as hashes, and expire automatically; passwords are stored only as salted hashes.
We retain personal data only as long as needed for the purposes described here or as required by law.
If this policy changes, we will update this page and its effective date.