Red Flag Check

Privacy

Last updated: 28 October 2026 (added how the checker learns). This notice is written to meet South Africa's Protection of Personal Information Act (POPIA) and the EU/UK GDPR.

What you paste

Messages you check are analysed in memory and discarded straight away. We don't save them, read them or use them to train anything. To give an AI second opinion, the message is also passed to Cloudflare Workers AI, which runs on the same Cloudflare network that hosts this site and doesn't use it to train models.

How the checker learns

When our AI review is very confident a message is a scam, we keep three things so we can warn the next person faster: the website addresses in it, any phone numbers in it, and a one-way fingerprint of the wording that can't be turned back into the message. We also keep the date and a scrambled daily code for the visitor (described below) so one person can't skew the results. We never keep the message itself. These records only count once several different people have seen them, and they expire after 90 days. Official company websites, link shorteners and chat apps are never recorded. If you believe your website or number was recorded unfairly, contact us and we will remove it.

Community flags

If you flag a website or phone number, we store that website or number, the date, and a one-way scrambled code made from your internet address and a secret key. The code changes daily and can't be turned back into your address. We use it only to stop spam and duplicate flags.

Cookies and tracking

We don't use advertising cookies or third-party trackers. Our host, Cloudflare, processes basic connection data to keep the site secure.

Your rights

You can ask what we hold about you, ask us to correct or delete it, or object to how we use it. If you believe a website or number was flagged unfairly, contact us and we will review it.

Contact

Responsible party: [Registered business name]. Email: [contact email]. In South Africa you may also complain to the Information Regulator.