Privacy Policy

1. The short version

No accounts. No tracking cookies. No advertising. No data selling — ever. The production website runs in privacy mode: message text you check is analyzed and the verdict is stored, but the message content itself is not kept.

2. What we store

• Scan verdicts — risk level, score, detected signals and a random report ID so verdicts can be shared. Message text is not stored (privacy mode).
• Link intelligence — for checked links: domain, hosting country, ISP, domain age and redirect info. This is public infrastructure data.
• Feedback votes — 👍/👎 on verdicts, linked to the report ID, not to you.
• Beta emails — if you submit one to the alert list. Used only for that, never shared.
• Discord trust data — for the bot's /report and /verify system: Discord user IDs, report reasons, verification status and report counts.
• IP addresses — transiently, for rate limiting only.

3. Third parties involved

• Fly.io — application hosting (EU, Amsterdam region).
• ip-api.com — when a link is checked, its IP is looked up for hosting location.
• RDAP registries — domain registration dates for checked links.
• OpenAI — only if/when AI analysis is enabled; the checked text would then be processed by OpenAI under their terms. It is currently disabled.

4. Discord-specific

The bot only sees messages sent directly to it (DMs), messages checked via /check, and the IDs of users involved in /report and /verify. It does not read server channels. Responses to /check are ephemeral (visible only to the person who ran the command).

5. Your rights

You can request deletion of any data connected to you (a scan report, a report you filed, your verification, your beta email) by emailing z5roagent@gmail.com or reaching the developer through the support server. Requests are handled promptly. GDPR: the legal basis for stored data is legitimate interest (fraud prevention) and consent (beta emails).

6. Contact

Privacy questions or deletion requests: z5roagent@gmail.com