Privacy policy
Last updated: 2026-05-21
What we collect
- The text you paste into the scam checker. Before analysis, we automatically replace common sensitive patterns — emails, phone numbers, SSNs, OTPs, bank/card-like numbers, crypto wallet addresses, addresses, URLs — with placeholders.
- The redacted text and the AI's analysis result. We store these so you can return to a result page and so we can improve our scam library.
- Salted hashes of your IP address and user agent. Used for abuse prevention and rate limiting. We do not store your raw IP address.
- Your email address if you opt in to the newsletter or request to have a result emailed to you.
What we don't want and don't use
Please do not paste:
- passwords or PINs,
- one-time codes,
- full Social Security numbers,
- full bank account or card numbers,
- private keys or recovery phrases,
- sensitive personal documents.
If you do, our redaction layer removes most of these before storage, but the safest practice is not to send them in the first place.
How long we keep things
- Raw user input: not stored by default.
- Redacted input without consent: 30 days, then purged.
- Redacted input with consent: until you request deletion.
- Analysis results: 180 days.
- Email signup: until you unsubscribe or request deletion.
- Salted IP/user-agent hashes: 180 days.
- Admin audit log: 1 year.
Who we share data with
- OpenAI for AI analysis. We send only the redacted text, never your IP or email.
- Supabase as our database and hosting backend.
- Resend for transactional and newsletter email.
- Vercel for hosting and anonymized web analytics (cookie-free).
We do not sell your data. We do not run advertising tracking pixels.
Your rights
You can request a copy of, correction to, or deletion of any information we hold about you. To request deletion of a specific result, use the "delete my result" link on the result page itself, or email us with the result URL.
Children
M0N3Y Scam Lab is intended for adults. We do not knowingly collect information from children under 13.
Contact
For privacy questions or deletion requests, contact privacy@m0n3y.com.