Qatar Scam Shield is a browser extension, not a service — it has no backend server, no analytics provider, and no user accounts. That makes this a short policy, but here is everything in it.
Summary
- We do not collect any data about you or your browsing activity.
- We do not use analytics, crash reporting, or tracking of any kind.
- There are no accounts, no sign-in, and no user identifiers.
- All scam detection happens locally, on your device, inside the extension.
- The extension makes exactly one kind of network request, described below, and it carries no information about you.
- We do not sell, rent, or share data — because we do not collect any.
The one network request this extension makes
Roughly every 6 hours, the extension downloads a public JSON file listing known scam domains, from:
https://qatar-scam-shield.pages.dev/blocklist.json
This is a plain, static file fetch from Cloudflare Pages (where this project publishes its list) — the same request, returning the same file, for every installation. It does not include your browsing history, the sites you've visited, or any other identifying information about you. It is subject to the same baseline exposure as any HTTP request (for example, Cloudflare's servers see the requesting IP address, as they would for anyone loading that URL in a browser tab), but nothing about you or your device is added to the request. If the fetch fails, the extension silently falls back to the list bundled inside it and tries again on the next scheduled refresh.
What the extension can see, and where it stays
Qatar Scam Shield needs fairly broad permissions to do its job. Here is what each one is for, and why none of them send data anywhere:
| Permission | What it's for |
|---|---|
Host permissions (http://*/*, https://*/*) and the content script | Let the extension read the address and page content of sites you visit, so it can check them against its detection rules. This check happens entirely inside your browser; page content and addresses are scored locally and are never uploaded or transmitted anywhere. |
| declarativeNetRequest | Lets the extension redirect a page to its own bundled warning screen when the address matches a known-scam entry, before the page can render. This decision is made from rules generated out of a local list — no external service is contacted at request time. |
| webNavigation | A fallback check when a page starts loading, in case the redirect rule above doesn't apply, so a known-scam page can still be caught early. Also evaluated entirely on-device. |
| storage | Saves your own settings (which detection tiers are enabled, custom domain lists, per-site bypass choices) and basic local counters (like how many warnings you've seen) inside Chrome's local extension storage, on your device. Never transmitted anywhere, and removed if you uninstall the extension. |
| alarms | Schedules the periodic blocklist refresh described above. It's a timer, nothing more. |
| activeTab | Lets the popup show a verdict for the tab you currently have open when you click the toolbar icon. |
Children's privacy
Qatar Scam Shield is a general-purpose security tool. It does not knowingly collect data from anyone, child or adult, because it does not collect data from anyone at all.
Changes to this policy
If this policy changes — for example, if a future version adds an optional feature that involves a new network request — this document will be updated first, the change will be called out in the release notes, and the effective date above will be updated accordingly.
Contact
Questions, concerns, or a scam site to report? Open an issue on GitHub:
github.com/abdullahkn287/qatar-scam-shield/issues
Qatar Scam Shield is an independent, community-built project and is not affiliated with, endorsed by, or operated by the Government of the State of Qatar. درع قطر أداة مجتمعية مستقلة وغير تابعة لحكومة دولة قطر.