Privacy
Nothing you type leaves your browser.
That sentence is the whole policy, in plain language. The rest of this page is the longer version — what we don't do, what we don't collect, and why it matters.
What we don't do
- We don't collect personal data.
- We don't require an account, an email, or a phone number.
- We don't run analytics, identifying cookies, third-party trackers, or advertising pixels.
- We don't log who clicks which deep-link, opens which booklet, or reads which page.
- We don't send your input to any third-party AI service. There is no chatbot, no AI search, no “ask Claude” box on this site. The site is built and written by a person.
What runs in your browser
Every tool on this site — the username appearance check, the reverse image search, the Family Constitution builder, the Conversation Starters library, the platform walkthroughs, the slang glossary, the awareness pages, the crisis-routing hub at /help-now, the First 30 Minutes script — runs entirely in your browser. Refresh the page and any input clears. There is no server-side state for any of those tools.
The Family Digital Constitution you build is a particularly clear example: you type your articles, your family's name, your signers — print, then close the tab. None of it was ever saved anywhere. The same is true for the username check, the image search, and every other interactive tool.
About the hotlines and external services
When you call or text 988, RAINN, Childhelp, or any other hotline, that conversation is between you and that organization. ShieldScan is not on the line. When you click out to NCMEC's CyberTipline or Take It Down, those services apply their own privacy terms; ShieldScan is no longer involved past the click.
When you click out to platforms like Instagram, TikTok, or YouTube to check a profile, their privacy terms apply to whatever they observe. We don't see who you click out to.
Hosting, deploys, and what Vercel sees
ShieldScan is hosted on Vercel. Vercel sees standard request metadata at the network layer (IP address, user agent, the URL of the request) for the duration of serving the page. We do not turn on Vercel Analytics or Vercel Web Vitals — both stay off, by policy. Every page on the site is statically generated and served as plain HTML; there are no server-side functions that handle your input, because there is no input that gets handled server-side.
Children and minors
ShieldScan is built for parents and trusted adults. The site does not knowingly collect data from minors and does not require any input that would identify one. If a child happens to land here and uses the tools, the same browser-only model applies — nothing they type is collected.
Updates to this page
When the architecture of this site changes — for example, if we ever add a feature that involves a third-party service that sees your input — this page updates to disclose it. We do not bury those changes in dense legal text; we name them, in plain language, in the same voice as the rest of the site.