SAINT SHIELD — PRIVACY STATEMENT
Last updated: 2026-04-21

What we collect
When you report a site as a scam, we store:
  - The registrable domain of the reported URL (e.g. "scam-site.com")
  - A one-way SHA-256 hash of your anonymous install ID
  - A Unix timestamp of the report

What we do not collect
  - Your IP address. The Worker explicitly ignores cf-connecting-ip.
  - The full URL (path and query string are stripped before storage).
  - Any personal information, wallet addresses, email, or account data.
  - Browsing history. The blocklist is fetched as a full list; we never
    receive individual lookup queries.

Install ID
  - Generated randomly on first install. Never leaves your device unhashed.
  - Stored only as a SHA-256 hash on our servers.
  - Used solely to enforce the "3 unique reporters" threshold and rate limits.
  - Cannot be reversed to identify you.

Data storage
  - All data is stored in Cloudflare D1 (SQLite) in Cloudflare's global network.
  - Data is retained until manually removed by the Saint Shield team.

Contact
  For removal requests or questions: info@stsola.us