Privacy notice

PhishGuard AI is a university research and training project. This page says what is stored and why, in plain language.

What we store

• Your username, a password hash (never the password), and the name you want on your certificate.
• Your incident results: what you flagged, what you wrote, your scores and timings.
• If you opt in to the research study: your answers to the pre and post assessment and the final survey.

Research use is optional

You can use every feature without joining the study. If you join, researchers only see results under a random code, never your username or name. You can leave the study at any time in Settings; from then on your data is excluded from exports.

The AI service

Incidents and some feedback are written by Google's Gemini service. When your written explanations are rated, that text is sent to Gemini. Do not type personal information or real passwords into any box. Free API tiers may allow the provider to use submitted content to improve its products, so treat anything you type as non-private.

Leaderboard

Only your username is shown, never your real name. You can hide yourself in Settings.

Delete your data

In Settings you can delete your account. This removes your profile, incidents, results, survey answers and certificate.

Certificates

A certificate has a public verification page that shows the name printed on it, the score and the date. Only people you give the link or QR code to can find it.