Privacy policy

What this site is — and isn't

ScamCallCheck is a community database of reports about the behavior of phone numbers that place unwanted calls and texts. We are not a people-search service: we do not identify, and do not attempt to identify, the private individuals behind phone numbers, and we do not publish names, addresses, or other personal details of any caller. Pages contain only user-submitted reports about call behavior and statistics derived from public government complaint datasets.

What we collect from visitors

You can browse and submit reports without an account. When you submit a report we store the report content, category, approximate country, and a one-way salted hash of your IP address used solely for rate limiting and abuse prevention — the raw IP address is not stored, and the hash rotates daily. Standard server logs (page requested, time, user agent) are retained briefly for security and debugging.

Report comments are automatically filtered to remove email addresses, phone numbers, links, and other personal identifiers before publication. Please don't include anyone's personal details in a report; anything our filters catch is stripped, and anything they miss will be removed on review.

Public data sources

Complaint statistics shown on number pages are derived from public government datasets, including the US FTC Do Not Call complaint data and FCC consumer complaint data. These datasets contain phone numbers complained about — not complainants' details — and are republished here with attribution as permitted for public government data.

Your rights

Depending on where you live (including under the EU/UK GDPR, California's CCPA, and Canada's PIPEDA), you may have rights to access, correct, or delete personal data. Because we store almost no personal data about visitors, most requests concern content on number pages: if a page concerns your number or contains information about you, use our review and removal process — we respond to every request within 72 hours.

Paid API customers

If you subscribe to a developer plan, payment is taken by Stripe on Stripe's own pages under Stripe's privacy policy; card details never reach this site. We keep the billing email Stripe passes back, the subscription identifier, a hash of your API key, and a monthly count of lookups. None of that is linked to any number you look up: requests are not logged against your key beyond the count.

Cookies and affiliate links

Three optional scripts exist on this site: Google Analytics; Awin's publisher tag, which sets cookies used to credit us if you buy through a partner link on the NordVPN affiliate programme; and Google AdSense, which sets advertising cookies. Google and Awin each act as their own data controller for the cookies they set, under their own privacy policies.

In the UK and the EEA none of them load until you agree. Elsewhere they load by default and you can switch them off at any time using the "Cookie preferences" link in the footer, which reopens the same choice. Declining sets nothing; the site works identically, and affiliate links still function — we simply do not set the cookie that credits us.

Beyond those three, we set no advertising cookies. Affiliate links are clearly disclosed wherever they appear, and the destination provider may use further cookies under its own policy once you leave. We do not include the phone number you searched or any report content in partner links, and partner links send only our site origin as the referrer.

Contact

Privacy questions and requests: use the removal form, which reaches the same review queue.