ScamZam checks a website only when you click the button, and only the tab you are on.

What leaves your browser: the domain of the page (never the full address) and a short extract of the page's visible text, with email addresses, phone numbers and long digit sequences removed first. This is sent to our own server and assessed by rules and by language models at Groq in the United States. The text is not stored.

What stays on your machine: an anonymous random id used only for the daily limit, your check history, and your language and theme choice.

If you report a wrong verdict, the domain, your note and an optional email address are stored for 400 days so we can reply. Nothing is sold and nothing is used for advertising.

Full policy: https://scamzam.com/privacy