What we collect, and why.

On this website

Strictly necessary cookies keep the site working. This site currently sets no optional cookies.

Free checker (no account)

You can run a few checks on this site without an account. Here is what happens to what you submit.

• Links and text are hashed at our edge. To produce the verdict, the raw text is also sent to our AI provider, Anthropic. We process it in memory and never store it; Anthropic may keep it for up to 30 days for safety review and does not train on it.
• Passwords are hashed in your browser and never leave your device. We receive the hash in memory, send Have I Been Pwned only its first 5 characters, and keep only that prefix.
• Cloudflare Turnstile checks that you are a person. It processes your IP address and browser signals for bot protection.
• The 3-checks-per-day limit uses a salted hash of your IP address, and the salt rotates weekly. No cookies, no fingerprinting.
• What we keep: a one-way hash of what you checked, the verdict and the AI's reasoning; if a check is rated a scam with 80%+ confidence, also the website's domain name (never linked to you). Confirmed scam domains may be published in a public blocklist used by RAVIONIX Guard; unconfirmed names are deleted 90 days after they were last flagged. Each free check also writes a security-log entry with the weekly-salted IP hash and the hash of what you checked, kept for up to 2 years for abuse prevention. Nothing else from the check.

In the app and browser extension (signed-in accounts)

Anyone can sign in free to get check history; paid plans, once they launch, add more checks. When you sign in with Google or Microsoft we receive your name, email address and profile picture; Google or Microsoft handle your password and 2-step verification. We are the controller for this data. For a RAVIONIX Team customer's phishing-awareness training, the customer is the controller and we act as their processor.

• We never store the full link, message or password you check — only a one-way hash, the verdict and the AI's reasoning, plus the domain name of websites rated a scam with 80%+ confidence (never linked to you).
• Account holders can export or delete their data from settings.
• We do not sell your data or use it for advertising.

Waitlist

If you email us to join the waitlist for paid plans, we keep your email address and message only to tell you when paid plans launch. We don't use it for anything else or share it. Ask us at hello@ravionix.com and we'll remove you.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete personal data we hold about you as a controller — for example, contact details submitted through this site. Write to the data protection address below and we will respond within the statutory period.