Last updated: 9 November 2026
This policy explains how we process your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).
1. Data controller
- Controller: Henry Suarez (Fraud Watcher)
- Address: Avenida Pintor Felo Monzón, 35019 Las Palmas de Gran Canaria, España
- Contact: contact@fraud-watcher.com
2. What we process, why, and on what legal basis
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Newsletter | Email, language, sign-up and unsubscribe records | Sending you the weekly briefing and Fraud Watcher updates | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time | Until you unsubscribe; proof of consent and unsubscription kept for 3 years |
| Scam report | Summary, description, channel, region, amount lost and, if you give it, your email | Analysing the scam, warning others through anonymised alerts and contacting you if needed | Your consent (Art. 6(1)(a)) and our legitimate interest in preventing fraud (Art. 6(1)(f)) | 2 years, then anonymised or deleted |
| “Is this a scam?” checker | The text you paste | Analysing it and showing you the result | Your request (Art. 6(1)(b)) and our legitimate interest (Art. 6(1)(f)) | Not stored. We only log anonymously the date, language, risk level and scam type |
| Comments | Name, email, website (optional), IP address and comment | Publishing and moderating comments and preventing spam | Your consent (Art. 6(1)(a)) and our legitimate interest (Art. 6(1)(f)) | While the comment is published |
| Email contact | Whatever you send us | Replying to you | Your consent and legitimate interest | As long as needed to help you and up to 1 year after |
| Statistics and security | IP address, browser and pages visited, aggregated and without cookies | Measuring audience, keeping the site secure and preventing abuse | Legitimate interest (Art. 6(1)(f)) | Short-lived technical logs; statistics are aggregated |
Figures and alerts we publish from reader reports never include data that could identify you.
3. Recipients and processors
We do not sell or share your data. Only these providers process it, on our behalf and under a data processing agreement:
| Provider | Service | Location and safeguards |
|---|---|---|
| IONOS SE (Germany, EU) | Web hosting, database, backups and email | EU |
| Sendinblue SAS — Brevo (France, EU) | Sending the newsletter and managing subscriber lists | EU |
| Cloudflare, Inc. (USA) | Cookie-free visit statistics (Cloudflare Web Analytics) | USA, under the EU-US Data Privacy Framework and/or standard contractual clauses |
| Defiant, Inc. — Wordfence (USA) | Site security and attack blocking (processes IP addresses) | USA, under standard contractual clauses |
| Anthropic, PBC (USA) | AI analysis of the text you paste into the checker (we do not keep it) | USA, with appropriate safeguards (standard contractual clauses and/or the Data Privacy Framework) |
We may disclose data to authorities, courts or law enforcement when legally required.
4. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, at any time by emailing contact@fraud-watcher.com and saying which right you want to exercise. To leave the newsletter, just use the unsubscribe link in any email.
If you think we have not handled your rights properly, you can complain to the Spanish Data Protection Agency (AEPD, C/ Jorge Juan 6, 28001 Madrid) or the data protection authority where you live.
5. Children
This site is not aimed at children under 14 and we do not knowingly process their data.
6. Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), backups, access control, attack protection and data minimisation (for example, we do not store checker text).
7. Cookies
See our Cookie policy.
8. Changes
We may update this policy. We will show the date of the last update and, for significant changes, tell subscribers.