1. Overview
VeriFlag is operated by Caerify. We take your privacy seriously. This policy explains what information we collect when you use VeriFlag, how we use it, and your rights regarding that information. We do not sell your personal data.
2. Information We Collect
Queries you submit
When you paste a URL, message, or description into VeriFlag, we store that text in our database along with an AI-generated verdict. This allows us to return instant cached results for identical or similar future queries. We do not store your name, email address, or any identifying information alongside your query unless you choose to provide it.
Session identifiers
We generate an anonymous session ID stored in your browser’s sessionStorage. This identifier is used solely to track affiliate link clicks within a session for attribution purposes. It is not linked to your identity and is discarded when you close your browser tab.
Community submissions
If you submit a community report via our Submit page, we store the information you provide (what you saw, estimated losses, platform, contact method) along with an anonymous submitter ID. If you optionally provide an email address for updates, we store that email linked only to your submission.
Server logs
Our hosting provider (Vercel) collects standard server access logs including IP addresses and request timestamps. These logs are retained for up to 30 days and are not used for marketing purposes.
3. How We Use Your Information
- To return verdict results for your queries
- To build and improve our scam campaign database
- To detect patterns in scam campaigns reported by the community
- To track affiliate link clicks for commission attribution
- To process and respond to takedown requests
- To detect and prevent abuse of the Service
Query text may be processed by Anthropic’s Claude AI to generate verdicts. This processing is subject to Anthropic’s Privacy Policy. We do not knowingly submit personally identifiable information to the AI.
4. Third-Party Services
VeriFlag uses the following third-party services, each with their own privacy policies:
- Vercel — hosting and CDN. May log IP addresses and request metadata.
- Supabase — database (PostgreSQL). All data is stored in U.S. data centers.
- Anthropic — AI model used to synthesize verdicts for uncached queries.
- Cloudflare R2 — optional screenshot storage for community submissions.
- Affiliate partners — Aura, NordVPN, IdentityIQ, Experian. If you click an affiliate link, those companies’ privacy policies govern your interaction with them.
5. Cookies
VeriFlag uses only a single first-party cookie: a dismissal flag for the disclaimer banner (veriflag_disclaimer_v1). We do not use advertising cookies, tracking pixels, or third-party cookies. Analytics, if enabled, use cookieless counting via Plausible.
6. Data Retention
Published verdict records are retained indefinitely as part of our public scam campaign database. Pending and removed records are retained for 90 days for audit purposes, then deleted. Community submission emails, if provided, are retained only until the submission is resolved, then deleted.
7. Your Rights
You may request deletion of any query or submission you have made by contacting us at privacy@veriflag.ai. Because queries are anonymous, we may require you to provide the exact query text to identify your record. If a published verdict record contains your personally identifiable information and you believe it is inaccurate, please use our Takedown Policy process.
California residents have additional rights under the CCPA, including the right to know what personal information we have collected and the right to opt-out of the sale of personal information. We do not sell personal information.
8. Children
VeriFlag is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact privacy@veriflag.ai.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the Service after any change constitutes acceptance of the updated policy.
10. Contact
For privacy questions or data requests, contact us at privacy@veriflag.ai.