LEGAL & PRIVACY

Privacy Policy

SaferScans was built on a simple principle: your private data should never leave your device.

Last updated: August 2026 • Effective immediately

Zero Server Processing

Every QR code is decoded inside your browser memory using WebAssembly & JavaScript. We operate zero API backends that receive your scan payload.

In-Memory Camera Stream

Camera frames captured via MediaDevices.getUserMedia() are drawn to a temporary HTML5 Canvas and destroyed instantly after analysis.

Local History Only

Your scan history is stored strictly in your browser’s localStorage. You can export or clear your history at any time with one click.

Zero Third-Party Trackers

We do not include Google Analytics, Facebook Pixels, or advertising scripts. No tracking cookies are written to your browser.

1. Camera & File Permissions

SaferScans accesses your camera feed solely for live QR code detection. Permission is requested explicitly only when you tap "Start Scanner". The stream is rendered into a hidden canvas element and processed entirely client-side. Closing the tab, navigating away, or clicking "Stop Camera" immediately halts video capture and releases hardware devices.

When uploading an image file or pasting a screenshot, your browser processes the pixel data locally via JavaScript. No media files are ever uploaded or transmitted over HTTPS.

2. Data Storage & Management

SaferScans uses window.localStorage to store:

  • Your light/dark theme preference (saferscans-theme)
  • Your optional scan history list (saferscans_history)

Because this data lives on your device, clearing your browser cache or site data completely removes all stored scans. SaferScans servers possess zero record of your identity or history.

3. Anti-Phishing Analysis

Our Safety Preview Engine evaluates URL structure, protocol schemes, homograph characters, and domain shorteners. All heuristics run locally within your browser JS execution thread. We do not query third-party threat API servers with the links you scan, guaranteeing that your URL lookups remain completely private.

4. GDPR & CCPA Compliance

Under international privacy regulations (GDPR, CCPA, CPRA), users have rights regarding data access, portability, and deletion. Because SaferScans does not collect or retain personal data on centralized servers:

  • Right to Access: You can view all stored data in your browser’s History tab or developer tools.
  • Right to Erasure: Click "Clear All" in the History page to immediately purge all local data.
  • Right to Export: Export your scan history as a CSV file at any time.

Have privacy questions?

If you have any questions or feedback regarding our privacy practices, please contact our team.

Contact Support & Privacy Team →