Privacy Notice

What stays on your device

Your practice progress — accessibility preferences, assessment answers, mission progress, and scores — is stored in your browser's local storage on this device and is not sent with the Final Check-In. A protected local copy of a submitted check-in is also kept so a failed secure submission can be retried. “Start over,” “Clear this device,” or clearing browser data removes these local copies.

Final Check-In responses

When you submit the Final Check-In, its categorical answers are sent to The End Scams Project for program evaluation. They help us understand how many respondents report prior fraud loss, broad loss ranges, whether respondents believe the practice may help, the broad age ranges reached, and whether the response followed House Calls or the original missions.

The submitted record contains a random response reference, broad answer categories, questionnaire and notice versions, and submission time. It does not contain your name, email, exact age, exact dollar loss, assessment answers, mission choices, or the local learner session identifier. Results are reported only in aggregate; financial-response summaries remain hidden until at least 20 completed check-ins exist.

Keep the response reference shown after submission if you may want that record corrected or deleted. Contact the privacy team with that reference. Clearing this device removes only the browser copy, not a response already submitted to the program database.

What is never stored anywhere, even on your device

Personal safety-plan entries (trusted contacts, bank fraud number, family verification phrase, computer helper) are kept only in the page's memory while you are on the safety-plan screen. They are never written to local storage, cookies, web addresses, logs, or any server, and they are cleared after printing, completion, or exit.

We never ask for and never collect passwords, one-time security codes, bank or card details, Social Security numbers, government IDs, full birth dates, medical information, exact home addresses, or uploads of real scam messages.

Technical data from hosting

Like nearly every website, the selected hosting and database providers process standard technical information — such as IP address, browser type, requested pages, and connection logs — to deliver the service and protect it from abuse. The application does not copy IP addresses or browser details into Final Check-In records. Provider logs follow the provider retention configuration. This is why we do not describe the service as fully anonymous.

What we do not use

• No advertising trackers and no third-party analytics.
• No browser fingerprinting.
• No cookies for tracking.
• No assessment answers or identifiers in web addresses.

Organizational inquiries

The community pilot form opens an email in your own mail app; contact details you send are used only to respond and are kept entirely separate from learner practice data.

Contact the privacy team

Questions or deletion requests: [email protected]