Privacy Policy
Last Updated: 9/7/2026
1. Introduction
Welcome to Scamtinel. We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our browser extension, mobile application, and website.
2. Data Controller
The entity responsible for processing your data is:
Company Name: Box Labs LLC
Address: 1097 Budapest, Nádasdy utca 15. A. ép. 2. em. 218. ajtó
Tax ID (Adószám): 26093705-2-43
Contact: [email protected]
3. Information We Collect
We prioritize a "Privacy-First" approach. We minimize data collection to what is strictly necessary for the service.
3.1 Account Information
- Email address (for authentication)
- User ID (generated by our authentication provider)
- Family structure (linked accounts within your family group)
3.2 Browsing Data
Scamtinel uses a "Zero-Trust" whitelist approach.We do not track or sell your browsing history.
- Whitelists: Domains you explicitly approve are stored securely to sync across your family's devices.
- URL Checking: To protect you, the extension checks visited domains against your local rules. Aggregated, anonymized statistics about threat detections may be collected to improve our security intelligence.
4. How We Use Your Data
We use your information solely for:
- Providing and maintaining the Scamtinel service.
- Synchronizing settings and whitelists between your devices (e.g., Mobile to Extension).
- Authenticating you and your family members.
- Improving our threat detection algorithms.
5. Third-Party Services
We rely on trusted third-party infrastructure to provide secure services:
- Google Firebase: Used for secure authentication, database storage, and backend functions.
- Sentry: Used for error tracking and crash reporting to verify application stability.
6. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data ("Right to be Forgotten").
- Withdraw consent for data processing at any time.
To exercise these rights, please contact us at the address listed above or via the support channels in the application.