Privacy Policy

Last updated: 8 April 2026

Short version: we don't store the content of what you paste, we don't require an account to use the free tier, and we don't sell your data. If you opt in to share your email, we use it only for what we tell you we'll use it for. Here's the longer version.

What we collect

When you use RedFlagThis, the following happens:

• Content you paste or upload. Text, images, PDFs and Word documents you submit are sent to our AI provider for analysis and then discarded. We do not save the content to any database.
• Basic technical data. Like any website, our hosting provider receives standard server data (IP address, browser type, referring page) which is used to keep the site running and secure.
• A hashed usage identifier. To enforce the 3-scans-per-day free limit without requiring an account, we store a hashed fingerprint based on your IP address and basic browser characteristics. This is a counter, not a profile, and it resets every 24 hours.
• Your email address (only if you share it). You can optionally share an email to unlock a higher daily limit (10 scans per day). We store the email, a hashed verification token, and your scan count. See "Email addresses" below.
• Anonymous usage analytics. We use privacy-friendly analytics (Plausible) to understand how many people use the site and which pages they visit. No cookies, no cross-site tracking, no personal profiles.

What we don't collect

• We don't store the content of the text, images or documents you paste for analysis.
• We don't require a name, phone number or physical address.
• We don't use tracking cookies or third-party advertising pixels.
• We don't build advertising profiles about individual users.
• We don't sell, rent or share your email with anyone.

Email addresses (if you share one)

The free tier gives you 3 scans a day without any account. If you want more (10 scans a day, still free), you can share an email address. If you do:

• How it works: you enter your email on the upgrade page, we send you a magic link, you click it to verify, and you're in. No password, no account setup.
• What we use it for: verifying your identity via the magic link, tracking your daily scan quota, and sending you occasional product updates including news about future paid plans.
• What we don't use it for: we don't sell it, share it with third parties, or use it for any marketing unrelated to RedFlagThis.
• Where it's stored: in a Supabase (Postgres) database hosted in the EU. Only the email address and a scan counter are stored. Never the content of what you've pasted.
• Unsubscribe any time: every email we send includes an unsubscribe link. Unsubscribing stops product updates but keeps your higher daily limit intact.
• Delete any time: email us at admin@redflagthis.com and we'll delete your address and any associated usage data within 7 days. See "Your rights" below.

We will never ask for your email in exchange for unlocking a scan result. The value exchange is always upfront: your email for more daily scans.

Who sees your data

When you submit content, it passes through:

• Our hosting provider (Vercel) to serve you the site.
• Our AI provider (Anthropic, makers of Claude) to analyse your content. Anthropic's own privacy terms apply to this processing. As of the date of this policy, Anthropic does not train its models on content submitted via their API.
• Our database provider (Supabase) to store email addresses and scan counts, only if you've opted into the email-verified tier.
• Our rate-limiting provider (Upstash) to enforce daily scan limits. Only hashed identifiers are stored, never your content.
• Our email provider (Resend) to send verification and notification emails, only if you've shared an email address.
• Our analytics provider (Plausible) for aggregate, anonymous page view data.

That's it. No marketing partners. No data brokers. No third-party advertisers.

Screenshots, PDFs and documents

If you upload an image, PDF or Word document, its content is sent to the AI provider in the same request as any pasted text. We don't store the file on our servers. Once the analysis is complete, the file and its extracted text are discarded.

Cookies

We don't use tracking or advertising cookies. We may use essential cookies for functionality (remembering your email-verified status, for example, so you don't have to re-verify on every visit) but we don't use them to identify or follow you across the web.

Your rights

If you haven't shared an email, we don't have any personal information tied to you, so there's nothing to give you, delete, or correct. If you have shared an email, you can contact us to:

• See what we have on file (your email and scan count)
• Delete your email and all associated usage data
• Correct any inaccurate information
• Export your data in a machine-readable format

For any of these, reach us through the main site.

Children

RedFlagThis is not intended for use by children under 13. Please don't use our service if you're under that age.

Changes to this policy

If we update this policy, we'll change the "last updated" date at the top. Any material change will be noted clearly on the homepage for a reasonable period.

Contact

Questions about privacy? Reach us through the main site.