Privacy policy

We collect the minimum needed to run an account-based community record: an email and password to log in, a username, and the contributions you make. We don't run ad networks, we don't sell your data, and we don't track you across the web. The longer version is below.

Account data. When you register, we store your email address (used for verification and login) and a username. Your password is handled by our authentication provider and stored only as a secure hash — we never see or keep your plaintext password.

Your contributions. Profiles you add, evidence you post, replies, danger votes, evidence votes, and flags are stored and associated with your account. Most of this is public by design — it is the record.

Profile images. Images you upload (e.g. a profile picture for a listing) are stored in our hosted storage bucket and served publicly.

Approximate location.Our hosting provider derives an approximate country from your IP address and passes it to the site to personalise content (for example, the “On your turf” section on the homepage). We do not store your IP address in our own database beyond the short-lived infrastructure and authentication logs kept by our providers.

Basic activity. We keep account timestamps (created, last active) and aggregate counters (submissions, reputation) to operate features like profiles and leaderboards.

We use essential, first-party cookies only — they keep you logged in and maintain your session. We do not use advertising or cross-site tracking cookies. If you aren't logged in, you can browse the entire record without us setting a login session.

To operate your account and authenticate you; to publish and attribute your contributions; to calculate ratings, reputation, and leaderboards; to personalise a small amount of content by country; and to keep the platform safe (reviewing flags, handling disputes, preventing abuse). That's the whole list.

We rely on a small number of infrastructure providers acting as our processors:

Our backend provider (Supabase) hosts the database and authentication.

Our storage provider (Cloudflare) hosts uploaded images. On submission forms, we may also show a Cloudflare anti-bot check (Turnstile) when we see unusual activity — Cloudflare processes the technical signals needed to tell humans from bots.

Our hosting / CDN provider (Vercel) serves the site and provides the approximate-country signal described above.

Embedded third-party media.Viewing a profile may load thumbnails or embeds from external platforms (YouTube, TikTok, Vimeo, news sites, and the like). Those platforms may receive your request and apply their own privacy policies. We don't control them.

We do not sell or rent personal data to anyone.

Depending on where you live (including the EEA and the UK under the GDPR, and similar laws elsewhere), you have rights to access, correct, export, or delete your personal data, and to object to certain processing.

Account deletion. You can delete your account from account settings. Deletion scrubs your username and email and disables login. Because your contributions are part of a public record that others rely on, the contributions themselves remain online but are no longer linked to you — their author is shown as [Deleted]. If you need a contribution itself removed, contact us.

To make any other request, email contact@scamfluencers.org.

Profiles may describe people who are not users of the site. We publish this information in the public interest — consumer protection, commentary, and criticism of public commercial conduct — relying, where applicable, on our legitimate interests as the lawful basis, balanced against your rights.

You can object to a listing, request correction of inaccurate information, or request removal of content that is false or that shouldn't be here under our listing rules (only public-facing online creators can be listed — profiles about private individuals are removed). See disputing a listing and the contact page.

We keep account data while your account is active. Public contributions are retained as part of the record. When you delete your account, identifying account data is scrubbed as described above. We retain what we must to operate the service and meet legal obligations.

The site is not directed at children and is intended for adults. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we'll remove it.

We may update this policy as the site evolves. Material changes will be reflected in the “last updated” date below, and significant changes will be announced on the site.

Privacy questions and requests: contact@scamfluencers.org.