Privacy

Ordinary site use

ScamMark does not require an account. Site search runs in your browser against a static search index; the search feature itself does not send your search terms to ScamMark.

Website and domain checker

When you submit a domain or URL to the website checker, ScamMark sends that target to its Cloudflare Worker so the service can collect public registration, DNS and ordinary web-response information. The checker may contact IANA and registry RDAP services, a compatibility RDAP service, public DNS services and, when necessary, a WHOIS server. It may retrieve a limited amount of ordinary HTML from the target website without logging in, submitting forms, executing page JavaScript or running downloaded content.

Normalized website targets and automated results may be cached temporarily so repeated checks do not create unnecessary external requests. Ordinary checker submissions do not automatically create public, indexable pages and the website checker does not ask for your name or email address.

Pasted message, email, SMS and instruction analysis

The current text checker runs its deterministic and heuristic rules in your browser. ScamMark does not need to transmit or store the full pasted text to apply those rules. If the text contains a website address, the checker can offer to inspect that URL separately; only a URL that you choose to check is sent to the website-checker Worker.

Do not paste passwords, one-time codes, recovery phrases, private keys, private account links or other secrets into the checker.

Independent pre-purchase checklist

The optional online-shopping checklist is a self-assessment. The choices you make are processed in your browser while the page is open; the current feature does not submit individual selections, calculate a merchant reputation score, store them on ScamMark or associate them with a target domain. If optional analytics is enabled with consent, a general interaction event may be recorded without your selections or website target.

Social-profile verification worksheet

The Facebook/Instagram identity-verification worksheet is a browser-only self-assessment. ScamMark does not request account sign-in, fetch social profiles, store handles or transmit individual checklist choices. Its status is not a platform authenticity check. Optional consent-based analytics may count the first checklist interaction without recording its answers.

Measurement

The checker includes privacy-minimizing event hooks that can measure the type of check, whether a check starts/completes and identifiers for rules that fired. The event design does not include submitted message text, website targets or extracted URLs. Optional analytics remains off unless ScamMark configures analytics and the visitor permits it through the site's analytics controls.

Operational data

Cloudflare may process ordinary network and security logs as part of hosting, abuse prevention and service delivery. ScamMark does not intentionally expose checker submissions publicly.

Public research pages

ScamMark may separately publish editorial research about websites or domains when there is a clear public-interest reason. Those pages are manually prepared from public evidence and are not automatically generated from checker submissions.

External links and services

ScamMark links to research publishers, consumer-protection organizations, regulators, banks, platforms and other third parties. Those services have their own privacy practices.

Payments

ScamMark does not currently charge for the automated checker and does not collect payment-card details.

Last updated: October 9, 2026.