How Scammer Shield handles data

What we collect

During merchant setup, Scammer Shield receives store details needed to create and verify the connection: website name, website URL, store contact email, country, shop category, plugin version, and verification details.

For order checks and merchant-submitted reports, the plugin converts customer details into deidentified signals before sending them. These signals are SHA-256 hashes derived from values such as billing email, phone number, name with postcode, name with country, and billing address. The plugin may also send order value and currency so the service can provide a useful risk assessment.

How customer data is deidentified

Raw customer identifiers are normalized and hashed inside the plugin before transmission. Scammer Shield receives the resulting hashes, not the original customer email address, phone number, name, or street address.

A hash is a one-way representation used for matching repeated patterns. It lets the service compare signals across reports without needing to store the original customer value.

How reports are handled

When a merchant submits a scammer report, Scammer Shield receives the merchant ID, deidentified signals, selected scam category and type, report date, and any administrator-entered notes.

Report notes are intended for deidentified context only. The plugin rejects notes containing email addresses or phone-like numbers, and the service applies server-side redaction again before storage.

What we return

The service returns match results such as risk level, confidence, matched signal types, aggregate counts, and limited deidentified excerpts for display in the merchant's order review panel. It does not return raw customer personal information.

What is not deidentified

Merchant account and setup information is stored as provided so Scammer Shield can verify stores, recover connections, and support the service. This includes business-facing details such as website URL and store contact email.

Questions

For privacy questions, contact hello@scammershield.io.