Privacy policy

John Kueh operates untrappable.com. Questions about this policy go through contact, which publishes the email address I read.

untrappable does not have accounts, a customer database, or a contact form.

Hosting logs. The site is hosted on Vercel. Like most hosts, it may record ordinary request data needed to serve and protect the site — for example the page requested, approximate time, browser user-agent, and IP address.

Analytics. The site uses Vercel Analytics for aggregate page-view counts. When Google Analytics is configured, it receives similar traffic data plus a small set of category-only events (for example that a check finished, or that a recovery step was opened). Those events are written so they cannot carry message text, email addresses, or full URLs.

Email you send. If you write to the address on contact, your mail provider delivers that message to me. I use it to read and reply. I do not add you to a marketing list.

Affiliate clicks. Some product links are affiliate links. If you follow one, that merchant's own site may collect information under their policy. I may later receive a commission record that a referral occurred. I do not receive your payment card number.

The checker compares what you paste to documented scam patterns in your browser. The message is not uploaded, stored, or logged on untrappable's servers. An anonymous count of result categories (scam, warning, or all-clear) may be recorded. The content of the paste is not.

The information above is used to:

• Serve, secure, and understand use of the site
• See which guides and tools people reach, in aggregate
• Read and reply to mail you send
• Record an affiliate referral when you choose a disclosed product link

I do not sell your personal information. I do not use pasted scam texts to train a model, because those texts never leave your device.

Hosting and analytics providers (Vercel, and Google when Analytics is enabled) process the technical data described above so the site can run. They may only use it to provide those services.

I may also disclose information if required by law, or to protect people from ongoing harm.

Official recovery links on this site (for example FTC, FBI IC3, or your bank) are other organisations. Their sites have their own policies.

Analytics providers may set cookies or similar storage in your browser to tell return visits apart from new ones. You can block or clear cookies in your browser. The editorial pages and the checker still work without them; some aggregate counts may be incomplete.

I do not keep an untrappable account file on you. Hosting and analytics records follow those providers' retention settings. Mail you send stays in my inbox until I no longer need it to reply or to keep a record of a correction.

To ask a question about this policy, or to request that I delete an email you sent, use contact.

Service providers may process information in countries other than yours. Those countries may have different data-protection laws.

If this policy changes, I will update the date at the top of this page. A change that materially affects how personal information is handled will be described here.

Questions about privacy go to contact.