Privacy Policy

1. Information We Collect

AntiScrape is designed with privacy as a core principle. We collect minimal information:

• Encrypted Contact Information: Your email addresses and phone numbers are encrypted using AES-256-GCM encryption before being stored in our database
• Link Metadata: Link type (email, phone, WhatsApp, Telegram) and creation timestamp
• Analytics Data: Anonymous event data (link generation and unlock events) without personally identifiable information
• IP Addresses: Temporarily used for rate limiting to prevent abuse; not stored long-term

2. How We Use Your Information

We use collected information to:

• Provide the encryption and link generation service
• Prevent abuse through rate limiting and CAPTCHA verification
• Generate anonymous usage statistics
• Improve service performance and reliability

3. Data Security

We implement industry-standard security measures:

• AES-256-GCM Encryption: All contact information is encrypted server-side before storage
• Secure Key Management: Encryption keys are stored in environment variables, never in code or database
• CAPTCHA Protection: Cloudflare Turnstile prevents automated abuse
• Rate Limiting: 10 unlock requests and 20 link creations per minute per IP address. To count requests we store your IP address in a short-lived counter that is automatically deleted after the one-minute window ends. It is never linked to a specific link or to the contact details it protects.
• HTTPS: All data transmission is encrypted via TLS

4. What We DON'T Do

We are committed to your privacy:

• We do NOT store your unencrypted email addresses or phone numbers
• We do NOT log or track which specific links you unlock
• We do NOT sell, rent, or share your data with third parties
• We do NOT use tracking cookies or analytics that identify individual users
• We do NOT require account creation
• We do NOT retain IP addresses beyond the one-minute rate limiting window described above

5. Data Retention

Links do not expire. We deliberately do not delete links automatically, so that a link you have published on a website or in a document keeps working for as long as you need it.

You stay in control of removal. When you create a link we issue a one-time delete token. You can use it at any time, at antiscrape.xyz/revoke, to permanently erase the link and the encrypted data behind it. The token is shown to you only once and we store only a hash of it, so we are unable to recover it for you. If you have lost your token and need a link taken down, contact us.

6. Third-Party Services

We use the following third-party services:

• Cloudflare: Hosting, CDN, and Turnstile CAPTCHA service
• Cloudflare D1: Database for storing encrypted data

These services have their own privacy policies. We recommend reviewing Cloudflare's privacy policy at cloudflare.com/privacypolicy.

7. Your Rights

The email addresses and phone numbers protected by this service are personal data. We hold them in encrypted form, and we hold the key, so we treat them as personal data under the GDPR and similar laws — encryption protects that data, but it does not remove our responsibility for it.

You can erase a link and its encrypted contents yourself, at any time, using the delete token issued when the link was created. If you have lost the token, or you are asking us to remove contact details of yours that somebody else protected, contact us through our contact page and we will delete the record. Because we do not require accounts, please include the link URL so we can identify which record to remove.

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect information from children under 13.

9. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date below.

10. Contact Us

If you have questions about this Privacy Policy, please contact us through our contact page.