← Back to SignalTools

Privacy Policy

Last updated: 9 May 2026

SignalTools ("we", "us", "our") operates signaltools.org and the tools hosted on it, including ScamSupport. This policy explains what information we collect, why we collect it, how it is used, and the choices you have.

We designed the site to be as privacy-respecting as possible: most tools run entirely in your browser, and we avoid unnecessary data collection.

1. Who we are

SignalTools is an independent project operated from the United Kingdom. For privacy queries or data requests, contact us at privacy@signaltools.org or via the Contact page.

2. What we collect

a) Information you submit to our tools

When you paste an email, text, link, or image into ScamSupport (or any future tool), that content is processed so the tool can return a result. Where processing can be done in your browser, it is. Where server-side processing is required (for example, to analyse a voice message or QR code), the content is sent to our service and processed transiently. We do not retain submitted content beyond what is needed to return the result, and we do not use it to build a profile of you.

b) Information collected automatically

When you visit signaltools.org, our hosting provider (Cloudflare) may log standard request data such as IP address, user agent, referrer, and timestamps. This is used for security, abuse prevention, and aggregate traffic analysis. Logs are retained for a limited period and are not used to identify individual visitors.

c) Cookies and similar technologies

We use a small number of cookies and similar technologies:

  • Essential — to make the site function (for example, remembering that you have dismissed a banner).
  • Analytics — anonymous, aggregated measurement so we can understand which tools are used and improve the service.
  • Advertising — Google AdSense and its partners may set cookies to serve ads and measure performance (see Section 5 below).

You can control cookies through your browser settings. Most browsers let you block third-party cookies entirely, and Chrome, Firefox, Safari and Edge all provide per-site cookie controls. For advertising cookies specifically, the opt-out routes listed in Section 5 below take effect industry-wide.

d) Newsletter sign-ups

If you subscribe to the weekly scam alert, we collect your email address for the sole purpose of sending that newsletter via Mailchimp. You can unsubscribe at any time using the link in every email. We do not sell or rent email lists.

e) Contact form

If you use the contact form, your name, email, and message are processed by Web3Forms and forwarded to us. We use this data only to respond to your enquiry.

3. Why we use your information

  • To operate the tools you request.
  • To maintain security and prevent abuse.
  • To improve the service through aggregate usage analysis.
  • To send the newsletter, if you have subscribed.
  • To respond to your contact form enquiries.
  • To comply with legal obligations.

Our legal bases under UK GDPR are: consent (for analytics, advertising cookies, and the newsletter), legitimate interests (for security, abuse prevention, and basic service analytics), and legal obligation.

4. How long we keep data

Content submitted to tools is processed transiently and not retained. Server logs are kept for a limited period (typically up to 30 days) for security and operational reasons. Newsletter subscriber data is retained until you unsubscribe. Contact form enquiries are retained for up to 12 months.

5. Advertising — Google AdSense and partners

SignalTools is funded in part by advertising. Google AdSense and its partners use cookies to serve ads based on a user's prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and other sites on the internet.

You can opt out of personalised advertising by visiting Google Ads Settings or, for third-party vendors, aboutads.info/choices and youronlinechoices.com. Additional information about Google's advertising practices is available in the Google advertising policy.

6. Affiliate disclosure

SignalTools earns part of its operating revenue from affiliate partnerships. We disclose every such relationship clearly, both here and adjacent to the link itself on the page where it appears.

Current affiliate partner:

  • NordVPN — we participate in the NordVPN affiliate programme. Some pages on the site (primarily the scam-guide pages under /scamsupport/scam-guides) link to NordVPN's consumer subscription. If you click the link and subscribe, NordVPN pays us a commission. The price you pay is the same as if you had gone to NordVPN directly — the commission is paid by NordVPN out of its own margin, not added on top of your subscription cost.

Our commitments under this arrangement:

  • We only recommend services we would use ourselves and that we believe are appropriate for the audience reading the page.
  • Affiliate revenue does not influence which scam patterns we cover, what verdicts our tools produce, or how we describe risks. The detection logic in ScamSupport is open to inspection.
  • We disclose the affiliate relationship visibly next to every affiliate link, in addition to this consolidated section.
  • Where future affiliate partners are added (for example, regulated cryptocurrency exchanges as alternatives to fake-platform pitches, or SRA-regulated solicitor referrals for confirmed fraud victims), the disclosure standard above will apply equally.

This disclosure is provided in line with the UK Advertising Standards Authority (ASA) and CAP Code for affiliate marketing and the disclosure expectations set by Google AdSense Programme Policies. If you have any concerns about how an affiliate relationship is presented, please email privacy@signaltools.org.

7. AI and machine learning

Some tools on SignalTools use machine-learning models for message classification. The current ScamSupport message-checker runs entirely in your browser — nothing you paste leaves your device. We do not currently use any cloud-based AI provider (OpenAI, Anthropic, Google, etc.) for classification.

If we add cloud-based AI in future, we will name the provider, explain the data-handling, and provide an opt-out path before that change ships. For the complete AI Statement (what we use AI for, what we don’t, accuracy claims, human-in-the-loop policy), see /about#ai-statement.

8. Third-party services

9. Sharing your information

We do not sell your personal information. We share data only with the service providers listed above, each contractually bound to use the data only to deliver its service. We may also disclose information where required by law.

10. International transfers

Some of our service providers are based outside the UK. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent mechanisms.

11. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. You can exercise any of these rights by emailing privacy@signaltools.org. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

12. Children

SignalTools is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Security

We use reasonable technical and organisational measures to protect the data we handle, including TLS encryption in transit, security headers, and access controls. No online service can be guaranteed to be 100% secure, but we work to minimise risk.

14. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of the page. Significant changes will be highlighted on the homepage.

15. Contact

Questions about this policy? Email privacy@signaltools.org or use the Contact page.