Privacy Policy & Data Security
Last updated: November 2026

PhishGuard is built for defensive cybersecurity research, triage, and threat mitigation. This Privacy Policy explains what telemetry is collected when you submit URLs for verification, how third-party scanning engines interact with queries, and how we protect confidentiality.

Information We Collect & Process

When a scan is dispatched, the following telemetry is transmitted through our edge infrastructure:

Submitted URL / Domain

Parsed and normalized for VirusTotal & urlscan.io queries.

Client IP Address

Retained ephemerally for rate limiting & automated abuse prevention.

Browser User-Agent

Evaluated to prevent bot scraping and brute-force traffic.

Verification Tokens

Cloudflare Turnstile cryptographically validates human requests.

Third-Party Security Vendors & Feeds

To provide comprehensive detection, your target URL is dispatched to:

  • VirusTotal (Google Cloud): URLs are queried against 90+ antivirus and anti-phishing vendors.
  • urlscan.io: A headless Chromium browser navigates to the target page in an isolated sandbox. When Public Visibility is selected, results may be viewable in the public urlscan.io stream. When Private Visibility is selected, the scan remains unlisted.

Zero Data Brokerage & Tracking

We do not sell, rent, or monetize your search history, IP addresses, or audited URLs. No cross-site marketing trackers, pixels, or third-party advertising cookies are present on this site.

Security & Contact Inquiries

For questions regarding data processing, security disclosures, or takedown requests, contact:

[email protected]