Excalion

ScamShield - Privacy Policy

Last updated: 2026-08-26

The short version

ScamShield analyzes websites locally and contributes anonymized scam signals to a shared database so everyone benefits. Your browsing history and personal data are never collected.

What ScamShield does

ScamShield detects fraudulent websites and e-commerce scams in real time. It analyzes domain age, SSL certificates, legal pages, price coherence, and reputation databases to flag fakes before you buy.

Data collection

ScamShield does not collect your name, email, browsing history, or any personally identifiable information. There is no account and no registration.

When you opt in to crowdsourced protection, ScamShield contributes anonymized scam indicators to a shared database. This includes domain-level signals such as domain age, SSL status, and detected scam patterns. It never includes page content, form inputs, or anything tied to you personally.

Network activity

ScamShield makes network requests in two cases:

  • Reputation lookups: queries against PhishTank and OpenPhish databases to check domain reputation
  • Crowdsourced contributions (opt-in): sends anonymized scam indicators to the Excalion API so newly discovered fraudulent sites can be flagged for all users

No browsing history, URLs beyond the domain being checked, or personal data is transmitted.

Permissions

  • activeTab: to analyze the security signals of the page you are currently viewing
  • storage: to save your preferences and cached analysis results locally
  • host permissions (limited): to perform reputation lookups against threat intelligence databases

Where your data lives

Your preferences and cached trust scores are stored locally in chrome.storage.local. This data never leaves your device. If you uninstall the extension, this data is deleted automatically by Chrome.

Third-party services

ScamShield queries PhishTank and OpenPhish for domain reputation data. Only the domain name is sent for these lookups, never full URLs or page content.

Cookies and tracking

ScamShield does not use cookies and does not track you in any way.

Supported browsers

ScamShield works on Chrome, Edge, and Brave. This privacy policy applies equally to all supported browsers.

Changes to this policy

Any changes will be reflected in extension updates. The date at the top of this page will be updated accordingly.

Contact

For questions about this privacy policy: hello@excalion.io