Privacy & cookie notice
Note to the site operator: this page is a starting template covering the cookies and data this application actually sets. It is not legal advice — review it against your own data protection obligations (GDPR / national ePrivacy implementation) and fill in the operator contact details below before relying on it.
Who runs this site
ScamWatch is run by [SITE OPERATOR NAME / CONTACT EMAIL — please fill in]. If you have questions about this notice or how your data is handled, contact us at [CONTACT EMAIL].
Cookies we use
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
PHPSESSID |
Keeps you logged in and your form submissions working correctly during a single visit. | Strictly necessary | Until you close your browser |
cw_consent |
Remembers your cookie preference so we don't ask again every visit. | Strictly necessary | 180 days |
remember_me |
Optional: keeps you logged in to your reporter account between visits, if you tick "keep me logged in" when logging in. | Optional / functional | 30 days, or until you log out |
admin_remember |
Optional: same as above, for the site administrator's login. | Optional / functional | 30 days, or until you log out |
We do not use analytics, advertising, or third-party tracking cookies. The strictly-necessary cookies above are exempt from consent under the ePrivacy Directive because the site cannot function without them (maintaining your session, protecting forms from tampering). The optional cookie is only ever set if you explicitly opt in, both by accepting optional cookies in the banner shown on your first visit, and separately by ticking "keep me logged in" when you log in.
Signing in with Google or Facebook
If you choose to log in, we use Google's or Facebook's sign-in service (your choice) to confirm your identity. We receive and store your name, profile picture, and email address as provided by that service, so we can attribute your submissions to your account and show a "trusted reporter" badge once you've had several reports approved. We don't post anything on your behalf, and we don't share this information with Google or Facebook beyond the standard login exchange. You can decline to log in entirely and submit reports anonymously instead.
What we store when you submit a report
When you report a scam ad, we store the screenshot you upload, the details you fill in, the date, and your IP address. Your IP address is used only for basic spam and abuse prevention (rate limiting, and blocking repeat abuse) — it is not shown publicly. If you're logged in, the report is linked to your account; otherwise it's stored anonymously aside from the IP address.
Your rights
Under GDPR, you can ask us to tell you what data we hold about you, correct it, or delete it (for example, removing your account or a report you submitted). Contact us at [CONTACT EMAIL] to make a request. You can also withdraw cookie consent at any time by clearing your cookies for this site in your browser, which will show the cookie banner again on your next visit.
If you logged in with Facebook, you can also remove your account and its data automatically by removing this site from your Facebook app settings — Facebook notifies us and we delete your account data right away. You'll get a confirmation link from Facebook where you can check the status.