Effective Date:This Privacy Policy is effective as of November 14, 2025 and covers the following topics:

1. Data We Collect
2. How We Use Your Data
3. How We Protect Your Data
4. Data Deletion & Account Termination
5. Data Sharing
6. Children’s Privacy
7. Your Rights
8. Changes to This Policy
9. Contact Us
10. Chrome Extension Permissions

By using ScamBlock, you agree to the practices described in this Privacy Policy.

ScamBlock is designed to protect users from online scams in real time while prioritizing privacy and transparency. ScamBlock operates primarily on-device, but in certain optional, user-triggered scenarios, additional data may be collected to improve our detection systems.

If the user chooses to submit a screenshot to ScamBlock (for example, by pressing a “Double-Check Screenshot” or similar button), and ScamBlock determines that the content appears to involve a potential scam, that screenshot may be uploaded to our secure servers for the following limited purposes:

• Improving scam detection models
• Enhancing accuracy for similar scam patterns
• Testing and evaluation of classifier performance

We never capture screenshots automatically. Screenshots are only uploaded:

• After explicit user action, and
• Only when ScamBlock believes the screenshot contains scam-related activity

Before storage, screenshots may be processed to remove or mask personally identifiable information whenever technically feasible.

Users may request deletion of their submitted screenshots at any time.

When ScamBlock detects a URL that appears to be associated with a scam, the extension may collect and store:

• The URL identified as suspicious
• The classification result (e.g., Scam, Safe, Unknown)
• The confidence score
• The timestamp of detection

This information is used to:

• Improve ScamBlock’s real-time threat detection
• Maintain a blocklist for faster protection
• Train and validate our detection models
• Prevent repeated evaluation of the same scam URLs

We do not associate suspicious URL entries with any personal user data or browsing history.

We never collect or store URLs from safe or unrelated websites—only those that ScamBlock has flagged as suspicious.

Except for screenshots that users explicitly submit, ScamBlock does not store:

• Chat messages
• Emails
• Posts
• Private conversations
• Page text
• User identity information

All on-device analysis runs locally and does not transmit personal content unless the user manually uploads a screenshot for additional confirmation.

ScamBlock may collect limited, non-content technical data necessary to operate and secure the service, including:

• Extension version
• Browser type and version
• Operating system
• Approximate IP address (used transiently for security and abuse prevention)
• Event logs related to scam detections (non-content)

This data does not include page content, messages, or browsing history, and is not used for advertising or tracking users across websites.

We use your data only for the following purposes:

• Detecting scams, fraud, malicious content, phishing, or impersonation
• Ensuring accurate real-time alerts
• Maintaining core functionality of ScamBlock

If you opt-in, your approved data may be anonymized, encrypted/vectorized, and used for:

• Model training
• Feature refinement
• Security enhancement

We never use identifiable screen content for training unless you have explicitly granted us permission.

We may retain minimal, non-content data to:

• Prevent fraudulent use of ScamBlock
• Detect malicious activity
• Enforce platform safety and integrity

This may include temporary, anonymized device or network identifiers used strictly for fraud prevention.

ScamBlock does not use user data for:

• Advertising
• Remarketing
• Cross-site tracking
• Sale of personal data

ScamBlock is a security-focused product and does not monetize user data in any form.

We take security seriously. ScamBlock uses:

• End-to-end encryption for all data transmitted to our servers
• On-device vectorization to strip personal identifiers
• Anonymization of any data used for training or analytics
• Industry-standard encryption for data at rest and in transit
• Strict access controls to limit who can access anonymized data

We do not sell, rent, or trade your personal data.

When you delete your ScamBlock account:

• All personal data stored on our servers is permanently deleted
• Any optional, consent-based data you previously allowed for training is removed if technically feasible
• Only minimal fraud-prevention metadata may be retained as required by law or security purposes (e.g., preventing unauthorized re-registration)

You may withdraw consent for data collection or training at any time, and ScamBlock will immediately stop processing any further data under that category.

• User-submitted screenshots: retained for up to 30 days, unless deleted earlier by the user
• Suspicious URLs and classification metadata: retained for up to 24 months to improve scam detection and prevent repeat threats
• Fraud-prevention metadata: retained only as long as necessary for security and legal compliance

All retained data is anonymized where possible and is never linked to personal identity.

We do not share your personal data with third parties except:

• When required by applicable law or legal process
• With your explicit consent
• With service providers who help us operate ScamBlock (e.g., hosting, security), all bound to strict confidentiality obligations

We never sell user data.

ScamBlock is designed to enhance online safety and may be used by individuals of all ages. However, ScamBlock does not knowingly collect personal information from children under the age of 13 (or the age defined by local laws) without verifiable parental consent.

The only data ScamBlock may receive is:

• URLs identified as suspicious
• Screenshots that a user explicitly chooses to submit for scam verification

If a submitted screenshot appears to contain personal information belonging to a child, it is processed solely for scam detection and model improvement and is protected under strict security controls. Parents or guardians may request deletion of any such data by contacting us.

Users under 13 should only submit screenshots with parental guidance.

Depending on your jurisdiction, you may have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Withdraw consent
• Object to certain processing
• Export your data (data portability)

For requests, contact help@scamblock.com.

We may update this Privacy Policy as we improve ScamBlock. If material changes occur, we will notify you via email or in-app notice.

If you have questions about this Privacy Policy or our data practices, please contact: hello@scamblock.com.

ScamBlock requests only the permissions necessary to provide scam protection:

• ActiveTab / Host Permissions – to analyze the current page for scam indicators
• Downloads – to check files for potential threats before download completion
• Storage – to store user preferences and local safety settings

These permissions are used solely for ScamBlock functionality and not for tracking or profiling users.

You’ve made it to the end of our Privacy Policy! We look forward to seeing you use ScamBlock to change the world for the better.