Skip to main content

Legal

Your rights over your data

You can ask, object, correct or request deletion, and the honest answer for most data is that it was never stored, so there is nothing to hand over.

Data protection rights are only useful if the answer they produce is a real one. Several of them assume the organisation holds a file about you.

This site mostly does not. No accounts, no stored history of checks, no message archive. Where that is the case, the answer to a request is short and verifiable instead of reassuring and vague.

The rights, and how each applies here

  • Access: you can ask what is held about you. For the tools, the answer is that the content of a check is not retained, so there is no record to disclose.
  • Rectification: if a page describes how something works incorrectly, you can ask for a correction, and that is the most likely place where a correction is both needed and possible.
  • Erasure: you can request deletion. Where nothing was stored, deletion is immediate because there is nothing to remove; where you have emailed us, the message itself is deleted on request.
  • Objection: you can object to processing. There is no profiling, no automated decision that affects you and no advertising use of your data to object to.
  • Portability: a copy of your data in a portable format can be requested. It applies to data you provided under a contract; with no account and no stored content, there is normally nothing to export.
  • Restriction: you can ask that processing be limited. Given the transient nature of a check, this follows from the design rather than from an additional setting.

Why the processing happens at all

  • Answering your request: a check is processed because you asked for it, which is the legal basis for returning a result to you.
  • Security of the service: minimal technical data is processed to keep the site available and to resist abuse, on the basis of the operator's legitimate interest.
  • Correspondence: if you write to us, the message is processed to reply, and is kept only as long as the exchange requires.
  • Errors and corrections: reading complaints about wrong or unclear results is how the explanations get better, and is the main reason feedback is useful.

There is no processing for advertising, no sale of data and no automated decision-making with a legal effect. Where a user is in a country with its own national rules, local rights that add to these are respected in the same way.

Making a request

  1. 1Write through the contact page and state which right you are exercising and what the request concerns.
  2. 2Include enough detail to identify what you are asking about, such as the address or link involved. There is no account to log into, so nothing more is required.
  3. 3Expect a direct answer, including when the honest answer is that no data is held. A substantive answer is more useful than an acknowledgement.
  4. 4If you believe the answer is wrong, say so with the reason. Complaints about clarity are treated as a defect in the page, not as an inconvenience.
  5. 5You can also complain to your national data protection authority, which is described on the privacy policy page.

Frequently asked questions

What is actually stored about me?

For a normal visit: no stored record of the checks you ran, no account, and no history. Technical logs at the hosting level may exist briefly for availability and abuse prevention.

How do I ask for deletion?

Write through the contact page and say what should be deleted. Where you have corresponded with us, the messages are deleted on request; where nothing was stored, there is nothing more to do.

Do you use my data to train anything?

No. Pasted content is not retained, and there is no model training or profiling using user data on this site.

Written by The BaitScan team

Last updated September 16, 2026

Results are automated risk estimates based on public indicators and heuristics.