Privacy Policy

ScamComplaints.org ("we," "us," or "the platform") is operated by Social Catfish, Inc. This Privacy Policy explains what information we collect when you use our website and how we use and protect it.

1. Information We Collect

When you submit a scam report through our Case Builder or Quick Report form, we may collect:

• Scam details — your written description of what happened, scam type, platforms involved, payment methods used, and dates
• Financial information — gift card numbers, cryptocurrency wallet addresses, payment amounts, and transaction details
• Suspect information — names, email addresses, phone numbers, usernames, wallet addresses, and website URLs associated with the scammer
• Technical data — your IP address (for rate limiting and fraud prevention) and basic browser information

We do not collect your real name, home address, Social Security number, or bank account information unless you voluntarily include it in your story.

2. How We Use Your Information

• To store and process your scam report for public awareness and investigative purposes
• To display aggregated or anonymized scam data on the Wall of Shame and other public pages
• To provide law enforcement with structured data exports (XML) upon request or through our public data access tools
• To detect and prevent abuse of our platform (rate limiting, bot detection)
• To improve the platform and identify scam patterns

3. Data Security

We take the security of your data seriously:

• Encryption — Sensitive financial data (e.g., gift card numbers) is encrypted using AES-256-GCM before storage. Only the last 4 digits are stored in plaintext for reference.
• Hashing — Card numbers are also stored as HMAC-SHA256 hashes for secure lookups without exposing the full number.
• Hosting — Our application is hosted on Vercel with data stored in Supabase (PostgreSQL). Both providers maintain SOC 2 compliance and encrypt data at rest and in transit.
• Rate limiting — API endpoints are rate-limited to prevent abuse and automated attacks.

4. Data Sharing

We may share report data in the following circumstances:

• Public display — Confirmed scam reports may appear on the Wall of Shame with scammer details (not victim details) visible
• Law enforcement — Structured data may be shared with law enforcement agencies investigating fraud
• XML export — Aggregated report data is available in XML format for research and investigative purposes

We do not sell your data to third parties, use it for advertising, or share it with data brokers.

5. Your Rights

You have the right to:

• Request deletion — Ask us to delete your submitted report by contacting us with your reference ID
• Access your data — Request a copy of any data associated with your report
• Correction — Request corrections to inaccurate information in your report

For California residents: Under the CCPA, you have additional rights regarding your personal information. We do not sell personal information.

6. Cookies & Analytics

We use Google reCAPTCHA to protect our forms from bots. reCAPTCHA may set cookies and collect usage data subject to Google's Privacy Policy. We do not currently use other analytics or tracking tools on this site.

7. Children's Privacy

This site is not intended for use by children under 13. We do not knowingly collect information from children under 13. If you believe a child has submitted a report, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at: info@socialcatfish.com

Social Catfish, Inc.
ScamComplaints.org