Last updated: 14 August 2026
We collect: (a) account registration data (username, email, hashed password); (b) submitted report content; (c) IP addresses for security and spam prevention; (d) optional profile fields (name, country, phone); (e) API usage logs; (f) donation records (if submitted voluntarily).
Data is used to: operate and improve the Platform; send email notifications if opted in; verify accounts; prevent abuse; process donation records; provide API access; comply with valid legal requests from law enforcement.
We do not sell your data. We may share data with: verified law enforcement agencies (after admin approval of legal documentation); our hosting provider (for operational purposes only); no third-party advertisers.
We use session cookies for authentication and theme preferences. No tracking cookies. No third-party analytics cookies unless Google Analytics is configured by admin.
You may: request deletion of your account and data; correct inaccurate information; opt out of email notifications via account settings; request a copy of your data by emailing info@whatascam.org.
Passwords are hashed using bcrypt. API keys are randomly generated 64-character hex strings. Uploads are stored in restricted directories. CSRF protection on all forms.
Privacy questions: info@whatascam.org