Privacy in short

Privacy in short

The full text is the privacy policy, also available in French, Portuguese, Spanish, German, Italian, Dutch and Hausa. In short:

• What is sent: only the email you scan (text, links, headers, attachments you choose), to the server set in Settings.
• What the server keeps: not your emails. They are analysed in memory and dropped. The server keeps link verdicts for 24 hours (to avoid checking the same link twice), the result of a scan for 24 hours (verdict and scores, keyed by a fingerprint of the email, not the email), and web-server logs (time, address, page) for 30 days.
• Third parties: the links of a scanned email are checked against Google Safe Browsing, PhishTank, URLhaus and Spamhaus. They see the link, not the email.
• In your browser: your scan history, reviews and settings, until you clear them or remove the extension.
• Reports, only if you send them: a wrong verdict you report (the email text after removing names, addresses, numbers and link paths, which you see and can edit first) or your statistics (no subject, sender or text) go to PhishLens Cloud, are stored without your IP address, used only to improve PhishLens and kept at most two years.
• No account, no tracking, no ads, no cookies on the website.

Want nothing to leave your computer? Use a local server.