Privacy policy
Last updated: 2026-06-06
1. Who we are
GACS (Global Anti-Crime & Safety) operates this website and the fraud-prevention tools and educational programs available on it. References to 'we', 'us', and 'our' refer to GACS.
2. What we collect
Account data (email, display name, hashed password or OAuth identifier) when you register; scam reports and evidence you submit; usage analytics (page views, device type, approximate region) to operate and improve the service; payment metadata (handled by Stripe, never card numbers) when you purchase a certification; cookies and similar technologies as described in our Cookie Policy.
3. How we use your data
To run the platform and provide the tools and education you request; to verify and publish scam reports (only after multi-source verification, per our Editorial Policy); to detect abuse and protect users; to communicate transactional and safety-related messages; to comply with legal obligations.
4. Legal bases (GDPR)
Contract (delivering the service you signed up for), legitimate interest (fraud prevention, security, service improvement), consent (optional marketing and non-essential cookies), legal obligation (responding to lawful requests).
5. Sharing
We do not sell personal data. We share data only with: infrastructure processors (hosting, database, email delivery, payments) under strict data-processing terms; law-enforcement when compelled by valid legal process; aggregated, de-identified statistics for research and transparency reports.
6. Retention
Account data is retained while your account is active and for a limited period after deletion to satisfy legal and security obligations. Public scam-registry entries are retained indefinitely as part of the public-interest record, subject to the Editorial Policy appeals process.
7. Your rights
You may access, correct, export, or delete your personal data; object to or restrict processing; lodge a complaint with your local data-protection authority. Contact privacy@gacs.app to exercise any of these rights.
8. International transfers
GACS is operated globally. Where data is transferred outside your region, we rely on standard contractual clauses or equivalent safeguards.
9. Children
GACS is not directed at children under 13. We do not knowingly collect personal data from children; contact us if you believe we have.
10. Changes
We may update this policy. Material changes will be announced on this page with an updated 'Last updated' date.
11. Contact
Questions or requests: privacy@gacs.app.
Data privacy FAQ
The questions readers ask most about how GACS handles personal data. Answers below match the FAQ structured data emitted on this page.
What personal data does GACS collect about me?
Anonymous scans store only the target (URL, handle, wallet, phone) and the verdict — never who scanned it. If you create a free account we store your email, display name, and a hashed password or OAuth identifier, plus the scans and reports you choose to save. We also collect basic usage analytics (page views, device type, approximate region) to operate and improve the service.
Does GACS sell, share, or use my data for advertising?
No. We never sell personal data, run ad tracking, or feed third-party data brokers. We share data only with infrastructure processors (hosting, database, email delivery, payments) under strict data-processing terms, and with law enforcement when compelled by valid legal process.
How do I delete my account and the data tied to it?
Email privacy@gacs.app from the address tied to your account, or use the in-app delete-account control. We remove account data within 30 days; a limited audit log is retained only as required by law and security obligations. Public scam-registry entries are kept indefinitely as part of the public-interest record, subject to the Editorial Policy appeals process.
What rights do I have over my data under GDPR and similar laws?
You may access, correct, export, or delete your personal data, object to or restrict processing, and lodge a complaint with your local data-protection authority. Contact privacy@gacs.app to exercise any of these rights — we respond within 30 days.
Where is my data stored and is it encrypted?
On Cloudflare edge workers with a Postgres backend. Data is encrypted in transit (TLS 1.3) and at rest. Where data is transferred outside your region, we rely on standard contractual clauses or equivalent safeguards.
Do I need to give GACS my wallet keys or financial credentials to use the scanners?
Never. GACS does not take deposits, does not connect to your wallet, and does not need your private keys, seed phrase, exchange password, or bank login. Any service claiming to do those things in our name is impersonating us.
Authoritative sources
Independent primary sources used to check and corroborate the guidance on this page.
- FBI Internet Crime Complaint Center (IC3)
Official US channel for reporting internet-enabled fraud and cybercrime.
- US Federal Trade Commission — ReportFraud
Consumer fraud reporting and published enforcement data.
- UK Action Fraud
UK national reporting centre for fraud and cybercrime.
- Canadian Anti-Fraud Centre
Canada's central repository for fraud reports and scam alerts.
