Privacy
We collect as little as possible — only what is needed to tell whether a code has been checked before.
What we store when you verify a code
- The 8-character code you entered, and whether it matched a real product.
- The time of the check, and whether it came from the website form or a QR scan.
- A salted hash of your IP address and browser signature — not the raw values.
These records exist so that a repeated check can be detected: a genuine code that has been checked hundreds of times is a warning sign. Records are kept for 30 days and then only daily aggregate counts remain.
What we do not do
- No advertising scripts, no third-party analytics, no cross-site tracking.
- No account, no email, no phone number is required to verify a code.
- We never sell or share individual verification records.
Cookies
One session cookie keeps your form state and rate limiting working. It contains no personal data.
Human verification
When the site owner enables it, the verification form loads Cloudflare Turnstile to block automated code guessing. Turnstile is subject to Cloudflare's own privacy terms. When it is disabled, no third-party script is loaded.
Contact
Questions about data handling? Contact us.