Privacy

Version 1, 9 September 2026. Early access. This page will grow as the service does; the principles in it will not change.

This website

scrapefighter.com sets no cookies, loads no analytics and no third-party scripts, and keeps no record of who visits. Our hosting provider, Cloudflare, processes requests to serve the pages and keeps its own operational logs under its terms.

The service

Scrapefighter scores web visits on behalf of website owners who install it. When a site uses Scrapefighter, its pages load a small script that records how the page is used for a few seconds: pointer positions and timing, touch positions, scroll positions, which navigation keys were pressed (arrow, page, space and similar, as categories), window size, timezone offset and language. The website's server or edge sends that sample to us together with the request context it already has: network address, network operator, country, browser headers.

We return a score and the reasons for it. The website owner decides what to do with it.

What we never collect

• Typed text of any kind. Key events are recorded as categories, never as characters.
• Cookies or identifiers stored in the browser.
• Device fingerprints such as fonts, canvas or audio signatures.
• Names, email addresses or accounts of visitors to customer sites.

Network addresses

Addresses are used to produce the score and to recognise verified search-engine and AI crawlers. They are stored only as keyed hashes that cannot be reversed to the address, and never in clear.

Retention

Raw behaviour samples are kept for up to 90 days and then deleted. Derived records, with hashed addresses only, are kept for up to 13 months to improve the detection. Aggregate usage counts are kept for billing.

Customer accounts

Customers sign in to the console with a third-party identity provider such as Google. We store the verified email address, the name and picture the provider shares, and a session cookie that keeps you signed in. Billing is handled by Stripe under its own privacy terms. Account data is deleted when the account is closed.

Where data is processed

On Cloudflare's network. Customer and research databases are located in the European Union.

Your rights

If you are a visitor to a customer's site, the site owner is the controller and we process on their behalf; contact them first. If you are a customer, or want to reach us about any of the above, write to hello@scrapefighter.com.