How Fraud Fighters handles your data
Last updated: 2 November 2026
In two lines
You can read the whole site without giving us anything: no tracking cookies, no analytics, no sign-up. We only receive data if you send it to us. If you tell us your story, only we read it, we never publish it, and it deletes itself after 12 months. If you ask for warnings about new scams, we use your email only for those.
Who handles your data
The data controller is:
Customized Trade Corp sp. z o.o.
ul. Hoża 86/210, 00-682 Warsaw, Poland
NIP 7011108437 · KRS 0000995164
Email: [email protected]
You can write to this address about anything to do with your data.
When you read the site
- No analytics, no advertising, no cookies that follow you. We do not know who you are and we do not try to find out.
- Language. When you open the home page, Cloudflare tells us which country you are visiting from, and we show you the version for that country: Italian, English or Polish. We do not store your country. If you change the language yourself, at the top of the page, your browser keeps a single technical cookie,
lingua, which remembers your choice for a year and contains nothing else. If you never change the language, there is no cookie at all. - Search stays in your browser. The words you type in "Is it a scam?" never reach us: they are matched against our guides on your own phone or computer.
- The site's font comes from our own server, not from Google or any other service.
- Cloudflare, the provider the site runs on, receives your internet address for every page you open, as happens with any website. We do not store it.
- The sources at the bottom of each guide are links to other people's sites (police, public bodies, newspapers). If you open them, those sites' rules apply.
When you tell us your story
What we receive
Only what you write in the form:
- how they contacted you (and, if you choose "Other", how);
- the month and year, not the day;
- who the scammer claimed to be;
- the number or email they wrote or called from, if you add it;
- your story;
- the photos, if you add any (up to 15; a PDF becomes one image per page, on your phone): only the blacked-out version, made on your phone. The page reads each photo on your phone and blacks out by itself any names, bank details, card numbers and email addresses it recognises; you cover the rest with your finger. The original is never sent, nor is the PDF, nor the text read from the photos;
- the guide you came from, if you started from a scam on the site.
Along with it we store the country you are writing from, which Cloudflare tells us, the language of the page you sent it from, and when the story arrived.
What we do not receive
Your name, your email, your phone number, your internet address, or anything that identifies your phone. We do not ask you to sign up. If you also ask for email warnings, your email arrives separately and we do not link it to your story.
One exception, to protect ourselves from anyone sending hundreds of stories in a row: when you send, your internet address stays only in the server's memory for ten minutes, to count how many stories arrive from it. We do not write it down anywhere and we do not read it.
What you write in your story, though, and whatever you leave uncovered in the photo, reaches us as it is: if you write your name, we will read it. Please do not send photos of ID documents, bank cards or conversations about your health. If they arrive anyway, we delete them.
What we do with it
We read stories to recognise scams better: to write the guides and warnings on this site, and to build the Fraud Fighters app that will recognise them on your phone.
We never publish anything you send us: not your story, not your photo, not any sentence that could identify someone. We write the guides on the site ourselves.
The scammer's number or email
We need it to see when the same scammer is writing to many people, and to warn others about a scam in progress. We do not publish numbers or email addresses on the site.
Scammers often use the number of a real person who has nothing to do with it. If you think your number has ended up among those sent to us, write to us: we will look for it and delete it.
Why we are allowed to
- Your story and your photo: your consent, the box you tick before sending (Article 6(1)(a) GDPR and UK GDPR). You can withdraw it whenever you like.
- The scammer's number or email, which is another person's data: our legitimate interest in protecting other people from a scam in progress (Article 6(1)(f) GDPR and UK GDPR), within the limits written above: we do not publish it and we delete it on request.
How long we keep them
12 months from arrival, photo included. Then they delete themselves, without anyone having to remember.
When you ask for warnings about new scams
What we receive
Your email, and when and with which sentence you signed up: we need this to be able to show that you asked for the warnings yourself. It arrives on its own: we do not link it to any story, even if you have just sent one. Here too, to protect ourselves from anyone signing up addresses in bulk, your internet address stays only in the server's memory for ten minutes, and we do not write it down anywhere.
What we do with it
As soon as you sign up we send you an email to confirm: until you press "Yes, warn me" you are not signed up and receive nothing else. That way nobody can sign you up instead of you.
After you confirm, we only write when a new scam is going round, or when a known scam changes shape. No advertising, no offers, and we never give your email to anyone.
Our emails contain an invisible image, and the links go through Brevo before taking you to the page: that way we know whether you open a warning and what you click, with the time and the internet address you do it from. We use it to see how many warnings are really read and to write better ones. If you'd rather we didn't, block images in your email app: you can still read the warnings.
Why we are allowed to
Your consent (Article 6(1)(a) GDPR and UK GDPR): you give it by writing your email and pressing "Warn me", and you confirm it from the email. You withdraw it whenever you like with the link at the bottom of every warning, or by writing to us. The same consent, given after reading this page, covers measuring opens and clicks.
How long we keep it
As long as you stay signed up. When you unsubscribe, we stop writing to you straight away and Brevo keeps your address on a list of people who no longer want emails, only so we never write to you again by mistake. If you want it deleted completely, write to us.
Who your data is shared with
We do not sell anything to anyone and we do not advertise.
Two providers handle your data on our behalf. Cloudflare: the site runs on Cloudflare, and the archive of stories is kept there. Brevo, a French company: sends the warnings, and receives and keeps your email only if you ask for them. Brevo keeps the data on servers in the European Union; some of its providers may access it from outside, with the same safeguards described below for Cloudflare. Cloudflare is a US company, so data may also be processed outside the European Union and the United Kingdom, on the basis of the European Commission's adequacy decision for the United States, the UK's data bridge with the United States, and standard contractual clauses.
Your rights
You can ask us to access your data, correct it, delete it, restrict its use, receive it in a readable format and object to its processing. If you gave consent, you can withdraw it whenever you like, without affecting what was done before.
Write to [email protected]. We reply within 30 days.
An honest note about stories: because we do not ask who you are, we do not know which story is yours. To find it, write to us with the month, how they contacted you and a few words of the story: we will look for it and, if you ask, delete it.
If you think we are getting something wrong, you can complain to a supervisory authority: in the United Kingdom the Information Commissioner's Office (ico.org.uk), or the Polish authority UODO (www.uodo.gov.pl), since the company is based in Poland.
If we change this page
The date of the last update is at the top. If we change something important, for example a new use of the stories, we will also say so on the form page.