Privacy notice · Last updated 2026-09-16
Privacy notice
Short version: we don't keep what you check, we collect as little as possible, and advertising cookies are only used with your consent.
Who we are
The controller of your personal data is A.I.T. Multiverse Consulting Ltd, Cyprus (“we”). Contact: privacy@tapsafely.com.
What we process and why
| Data | Purpose | Kept for | Legal basis |
|---|---|---|---|
| Messages, links and screenshots you check (including forwarded emails) | To produce your result | Not stored. Processed in memory and discarded. A one-way hash of the text may be cached for up to 6 hours so repeat checks are fast. | Legitimate interests / your request |
| Anonymous check statistics (date, country, scam type, risk level, score) | Scam Weather and service improvement | Up to 180 days | Legitimate interests (no personal data) |
| Scam reports you submit, plus a salted hash of your IP address | Moderation and public warnings (published without your identity) | Until removed; rejected reports deleted after 30 days | Consent |
| Email address for scam alerts | Sending the newsletter (double opt-in) | Until you unsubscribe; unconfirmed sign-ups deleted after 7 days | Consent |
| Email address for the Family Shield waitlist, plus plan, country and the page you joined from | Sending the launch email (double opt-in) | Until launch or until you unsubscribe; unconfirmed sign-ups deleted after 7 days | Consent |
| Daily AI-check counter, keyed by a salted one-way hash of your IP address | Enforcing the free daily allowance of AI checks | Up to 2 days | Legitimate interests |
| Contact form messages | Replying to you | Up to 24 months | Legitimate interests |
| Your email address when you forward an email to us | Sending the reply | Not stored by us after sending | Your request |
Cookies and similar technologies
- Strictly necessary: a short-lived cookie (
rfr_s, 30 minutes) that remembers you passed our human check, and Cloudflare Turnstile, which protects our forms from bots. - Preferences: your theme and Scam Weather country are saved in your browser's local storage. They never leave your device.
- Cloudflare Web Analytics: counts page views and measures page speed. It doesn't use cookies, doesn't collect personal data and doesn't track you across sites.
- Our own visit count: when a page opens, your browser tells our server which page it was, the website you came from (just its name) and your language. Our server adds your country and device type (phone, tablet or computer). To count unique visitors without cookies, it combines your IP address and browser details with a secret key into a one-way code that changes every day. We never store your IP address, we set no cookies and we save nothing on your device. We keep these anonymous counts for up to 400 days, and use them only to see how the site is used, in real time.
- Google Analytics 4: helps us understand which pages and tools are useful. It sets cookies (
_gaand_ga_*, kept for up to 2 years) and processes your IP address (shortened by Google), device and browser details, the pages you visit and which tools you use (for example that a check ran and the risk level it found, never what you checked). In the EEA, the UK and Switzerland these cookies are only set if you click Accept. Elsewhere they are set by default and you can decline at any time. Google processes this data for us under its data processing terms. We have turned off Google's optional data sharing. The text, links and screenshots you check are never sent to Google Analytics. Change your choice any time with Cookie settings. - Advertising: Google AdSense and any other advertising partners listed in our ads.txt file may use cookies to show and measure ads. In the EEA, UK and Switzerland, this only happens with your consent, collected by a Google-certified consent tool. You can change your choice at any time using the privacy settings link shown on the page. Learn how Google uses data from sites that use its services.
Who processes data for us
Cloudflare (hosting, security, AI processing, email routing) and, for advertising, Google and the other ad partners listed in our ads.txt file. Some processing may take place outside the EEA under appropriate safeguards such as the EU Standard Contractual Clauses.
Your rights
You can ask to access, correct or delete your personal data, object to or restrict processing, withdraw consent at any time, and receive your data in a portable format. Email privacy@tapsafely.com. You can also complain to the data protection authority where you live. Our lead authority is the Commissioner for Personal Data Protection in Cyprus, where our company is registered. People outside the EU have the rights their local law gives them, and we honour deletion requests from anyone.
Children
Our checker can be used by anyone, but our newsletter and reporting forms are intended for people aged 16 and over.
Changes
We'll update this page when our practices change and show the date at the top.