Privacy

Last updated: 2026-05-15

Short version: no accounts, no analytics, no ad networks, no fingerprinting, no third-party trackers, no data sold. We use three first-party cookies and a handful of aggregate counters, and your AI queries are processed on Cloudflare's infrastructure without being stored.

What we collect

We collect aggregate, non-identifying counters (e.g. "the total number of times the home page has been viewed") and we set three first-party cookies to remember your preferences. We do not collect names, email addresses, phone numbers, payment information, or any other personal data, because the site never asks for them.

Cookies

These are the only cookies set by this site. None of them are used for advertising, none are shared with third parties, and all are first-party (set by isthatascam.com).

• itas_loc (90 days) — Stores your chosen country/language (e.g. in/hi) so that future visits to the homepage don't bounce you to a default. Set only when you explicitly pick a country or language from the header.
• itas_theme (persistent until cleared) — Stores your chosen light or dark theme. Set only when you click the theme toggle.
• itas_counted (24 hours) — A flag that prevents the same browser from inflating the visit counter on refresh. Contains the literal value 1 and nothing else.

AI query handling

When you type or speak into the search box and submit, your query text, country code, and language are sent to a Cloudflare Pages Function on our own infrastructure. That Function:

• Looks up cached responses for an identical normalized query (so identical queries don't burn AI calls).
• If there is no cache hit, sends the query plus our top-five matching catalog entries to Cloudflare Workers AI (Llama 3.1 8B), which runs on Cloudflare's own servers — not OpenAI, not Anthropic, not any other third-party API.
• Returns the formatted answer to your browser.

We do not store your query text. The response is cached for 24 hours keyed on a hash of the normalized query so that repeat questions get a fast answer. Cloudflare's own systems retain queries only as needed to operate the Workers AI service; see Cloudflare's privacy policy for their handling.

Website / job-offer checker (/verify)

When you submit something on the /verify page, the text you enter — a website link, a domain, or, if you choose to paste one, an email address — is sent to a Cloudflare Pages Function on our own infrastructure. That Function:

• Extracts just the domain and uses it to query a public domain-registration lookup service (RDAP, the ICANN-standard successor to WHOIS) and to check whether the domain serves a working HTTPS site.
• Returns the resulting signals to your browser.
• Caches the result at Cloudflare's edge for up to 24 hours, keyed only on the bare domain — never on you, your IP, or the full text you entered.

We do not store the text you submit, do not log it, and do not associate it with you. If you paste an email address, only the part after the @ (the domain) is used; you do not need to enter an email for the tool to work. The Trustpilot, BBB, Google, and ICANN buttons are ordinary outbound links — clicking one takes you to that independent third party under their terms and privacy policy; we are not told whether you clicked, and we send them nothing beyond the domain in the link you choose to open. Before each check you confirm an "I understand" acknowledgement; this is a momentary on-page step only — nothing about it is stored in your browser or sent to us.

Aggregate counters

We keep four counters in Cloudflare KV storage. Each is a pure integer with no associated identifier:

• Total visits since launch.
• Visits per day (last 90 days, then expired).
• Total AI checks performed.
• AI checks per day (used to enforce our free-tier budget cap).

These exist so we can show the visit counter on the site and avoid exceeding Cloudflare's free tier. They do not contain IP addresses, query content, or any identifier tied to you.

Voice input

Voice transcription uses your browser's built-in SpeechRecognition API. The audio is transcribed by your browser (or, on some browsers, sent to your device's OS or to that browser's own speech service per its policy — Apple, Google, Microsoft). We do not record audio, and audio never reaches our servers. Only the resulting text is sent when you submit.

What we don't do

• No Google Analytics, Plausible, Mixpanel, Segment, or any other analytics service.
• No advertising networks, no remarketing pixels.
• No browser fingerprinting.
• No third-party scripts. The search index (Pagefind) ships as static assets from this site's own domain.
• No accounts. No newsletter. No lead capture. No "free trial."
• No sale, license, or sharing of any data — there is nothing to sell.

Server logs

Cloudflare, which hosts and serves this site, automatically logs standard request data (IP address, time, URL, user agent) at the edge per their own retention policy. We do not query, export, or correlate those logs with anything. They exist for Cloudflare's network operations and security, not for us.

Your rights

We don't hold anything tied to you, so there is no data of yours to export, correct, or delete. If you have a question or want to confirm any of the above, email [email protected].

Children

This site is intended for adults. We don't knowingly collect any data about anyone, let alone children under 13.

Changes to this policy

If our data practices change, we update this page and the "last updated" date at the top. This site is version-controlled in a public-history way; changes to this page can be reviewed in the commit log.