Last updated · May 7, 2026

Security

Trust is the whole product. Here’s how we protect what you send us.

In transit

Every request between your device, our service, and our partners travels over TLS. We use HSTS so browsers never downgrade to plain HTTP after the first visit.

At rest

Submissions and account data live in Supabase Postgres with row-level security so that only your account can read your own submissions. Database backups are encrypted.

Authentication

We use Supabase Auth. Passwords are hashed; we never see them. You can sign in with Google as an alternative to a password.

Responsible disclosure

Found something? We want to hear from you before it becomes a problem. Email support@getscamsnap.com with a description and steps to reproduce. We’ll acknowledge within 72 hours and credit you in any fix notes if you’d like.