Privacy policy
Effective 20 April 2026
WillItScam is a community-run lookup for website reputation. This page describes, in plain language, what we collect when you use willitscam.com and how long we keep it. If you use our Chrome extension, see the separate extension privacy policy.
What we collect
We aim to collect as little as possible while still running a usable, abuse-resistant service. Specifically:
- Domain searches. When you look up a domain or keyword, that query is sent to our API. We log the query alongside normal web-server access logs (which include your IP address and user agent) so we can debug outages and detect abuse.
- Your IP address, temporarily. We store your IP in a rate-limit table so we can stop a single source from hammering the API. Those rows are pruned after roughly one day.
- Votes you cast. If you vote on a domain (safe, sketchy, quality), we record the vote along with your IP address so the same IP can’t vote the same way on the same domain more than once per day. The IP is not shown publicly and is not linked to any account — we have no accounts.
- Aggregate view counts. We track how many times a domain page is viewed, as a single integer per domain. No per-user history is kept.
What we do not do
- We do not use third-party analytics, advertising networks, or tracking pixels.
- We do not set cookies for tracking. The site is a static export and does not need a session cookie to function.
- We do not sell or share your data with anyone. If that ever changes, this page will change first.
- We do not build a profile of the domains you’ve searched.
How long we keep things
- Rate-limit records (IP + endpoint + timestamp): pruned after about one day.
- Votes: kept indefinitely so the community rating stays stable, but only as the tuple
(domain, vote type, IP, day). There is no session thread connecting one vote to another across domains. - Web-server access logs: rotated on the standard nginx schedule (typically 14–30 days) and then deleted.
Community-sourced content
Vote totals and the resulting domain ratings are public. They aggregate everyone’s signal into a single number per domain — individual votes are never attributed to a person or IP.
Children
WillItScam is not directed at children under 13. We don’t knowingly collect personal information from children.
Changes to this policy
If we change what we collect, we’ll update this page and bump the effective date at the top. Material changes will also be noted in the site footer for at least a month.
Contact
Questions, data requests, or takedown notices: privacy@willitscam.com.