Privacy Policy
Last updated June 7, 2026
REDFLAG helps you check whether a message, link, screenshot, or contract is a scam. This policy explains what we collect, why, and what we never do. Plain version: we analyze only what you choose to check, we redact personal details before storing anything, and we don’t sell your data.
What you check
When you submit content (text, a link, a screenshot, or a document), we send it to our AI provider to produce a RED / YELLOW / GREEN verdict. Before we store anything, we redact obvious personal information (emails, phone numbers, card-like numbers). We keep a redacted record so you can see your history and so the community pattern library improves.
The browser extension
To flag risky links before you click, the extension may send the URL of a link you interact with to our API for a safety verdict, and caches recent verdicts locally in your browser. It does not collect your browsing history, read page content beyond the links it checks, or build a profile of you. The “threats blocked” counter is stored only on your device.
Identity & accounts
Free checks use a random, pseudonymous cookie — no account, no personal info. If you upgrade, we create an account tied to your email (via Clerk) and a customer record with Stripe. We never see or store your full card details; payments are handled by Stripe.
Community reports & trust signals
If you choose to report something publicly, it is redacted and shown as a neutral pattern (“N similar reports”), never as an accusation. Each verdict also mints a signed trust signal to Emilia Protocol, the trust infrastructure REDFLAG is built on — this carries risk metadata, not your raw content.
Analytics
We use privacy-respecting product analytics (PostHog) to count actions like “a check was run” or “a card was shared.” We do not record your screen and we never send the content you paste to analytics.
What we never do
- Sell your data.
- Collect your browsing history.
- Store your full payment-card details.
- Record your screen or keystrokes.
Contact
Questions or a data request? Email privacy@emiliaprotocol.ai.