Privacy policy

When you send a plan request

The request form asks for your name, email address and WhatsApp number with country code, plus your consent. The device and message fields are optional. The selected plan duration and its USD total are added by the site. The form never asks for card, bank or password details, and no payment is taken on the site.

Your request is checked by our server and emailed to the ScanFlick team's support inboxes. A plain-text acknowledgment is sent to the email address you entered. The team then confirms your request manually on WhatsApp.

The request server does not keep a database of requests. To prevent abuse, it keeps short-lived counters in memory based on your IP address and email address (for example, at most five requests per 15 minutes). Its service log records only the request reference and whether the emails were accepted, not your details.

Visit alerts

When you open the Home, USA or Canada page, the ScanFlick team receives one private Telegram alert per browsing session (a tab session expires after 30 minutes without navigation). We use these alerts to understand where visitors come from and to improve our ads. Known search-engine robots are excluded. Telegram is a third-party service.

An alert can include: your IP address; the approximate location estimated from it (country, region and city) and your internet provider; device and browser details (operating-system and browser versions, and the device model when your browser shares it); screen size; language; timezone; the entry page; the server time (UTC) and your local time; a referring-source category; the campaign tags of the link you came from (utm_source, utm_medium, utm_campaign, utm_term, utm_content); and whether you arrived from a Google Ads click, without the click ID.

Alerts never include your name, email, phone number or anything typed in the request form, and never include passwords, full referring URLs, URL fragments, advertising click-ID values or precise GPS location. Location is looked up on our own server in the DB-IP Lite database; your IP address is not sent to DB-IP. IP-based location is approximate and may be wrong with a VPN or mobile network.

For the same browsing session, a follow-up alert may summarise your visit so we can see where our pages are unclear: the ScanFlick pages you opened, how far you scrolled the first page, the time spent on the site, and which request steps you reached (plans and reviews seen, plan chosen, request form started, the names of fields that showed an error, request sent or failed, WhatsApp button used). It never contains what you typed. It is sent from your browser when you leave or switch tabs, is limited to a few updates per session, and follows the same opt-out and privacy signals.

• Opt out at any time: use the Privacy button at the bottom of any page and choose "Turn off visit alerts". Your choice is saved in this browser for 365 days.
• Global Privacy Control and Do Not Track signals are honoured automatically as an opt-out.
• Turning alerts off prevents future alerts; an alert already sent cannot be recalled. Plan buttons, the request form and WhatsApp work either way.

Google tag (advertising measurement)

Every page loads the Google tag for Google Ads. Google may use cookies or similar identifiers to measure ad performance and, when configured, to count a request that was accepted by our server as a conversion. Google processes this information under its own policies. The visit-alert opt-out does not control the Google tag.

• How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites
• Manage personalised ads: myadcenter.google.com, or block third-party cookies in your browser settings.

WhatsApp handoff

After an accepted request, the Thank You page prepares a WhatsApp message with your first name, request reference and selected plan. Nothing is sent until you press Send in WhatsApp yourself. WhatsApp is operated by WhatsApp LLC (Meta) under its own privacy policy. Messages you send on WhatsApp stay in our team's WhatsApp account.

What the site stores in your browser

The site does not set its own cookies. It uses browser storage only for these functions:

• A minimal request receipt (reference, plan and acknowledgment status) for the Thank You page, in this tab only, for up to 24 hours.
• Your first name for the prepared WhatsApp message, in this tab only, for up to 10 minutes.
• A one-time flag so WhatsApp opens only once after a request, in this tab only.
• Your visit-alert opt-out, if you choose it, for 365 days.
• A random tab session ID that prevents duplicate visit alerts, expiring after 30 minutes without navigation.
• The visit-summary steps described above (pages and request steps reached, never what you type), in this tab only; cleared when you turn visit alerts off.
• A one-time flag so a request is counted at most once for advertising measurement, in this tab only.

Web server logs

Like most websites, our web server keeps technical access logs (IP address, requested page, browser type and time) for security and troubleshooting. They are rotated automatically and kept for a short period.

How long we keep data, and your choices

Request emails stay in our support mailbox and visit alerts stay in our private Telegram chat until we no longer need them to handle requests, support and advertising, or until you ask us to delete them. We do not sell your personal information.

You can ask to access, correct or delete the request details or alerts we hold about you by emailing support.scanflick@gmail.com or messaging us on WhatsApp. Depending on where you live, for example in Canada or California, local law may give you additional rights.

Changes to this policy

We update this page when the way the site handles information changes. The date at the top shows the latest version.