Privacy
Privacy by design, with clear limits
Can I Share This? is designed to help you inspect suspicious links without requiring an account. This page explains what is processed during a check and when a URL may be shared with an external threat-intelligence provider.
Open the checkerQuick link checks
When you submit a public HTTP or HTTPS link, the server analyzes the URL and may fetch the destination to inspect redirects, reachability and basic warning signs. The application is designed not to store the scanned URL in its own scan-history database.
Quick Check does not automatically send the pasted URL to an external reputation database. It evaluates the signals implemented by Can I Share This? first.
Optional reputation checks
The external reputation check requires an explicit confirmation in the interface. When you continue, the public URL may be submitted to configured providers such as Google Web Risk or PhishTank so they can return known-threat information.
If the URL appears to contain a token, signature, session identifier or another sensitive-looking query parameter, the Deep Scan is designed to block the external lookup instead of forwarding that URL.
Email checks
If you paste an email address, the service can inspect its format and domain-level signals. The checker is intended for safety analysis, not for building a contact list or requiring an account.
Do not paste passwords, one-time codes, private messages or other secrets into the checker.
Analytics and telemetry
The site uses Vercel Web Analytics for aggregate page-view and visitor analytics. The application also has anonymous product telemetry for events such as opening the homepage or starting an analysis.
The custom scan telemetry is designed not to include the scanned URL or hostname. Hosting and security infrastructure may still process ordinary request metadata needed to deliver and protect the service.
What we do not promise
No internet service can promise that infrastructure providers retain zero operational metadata. The privacy claims on this site refer to the application's intended behavior and the data it deliberately sends to its own telemetry endpoints.
No scanner can guarantee that a link, sender or website is safe. New and targeted threats may not yet appear in reputation databases.
Questions
For a private or signed share link, avoid Deep Scan unless you are comfortable sharing the URL with external reputation providers. For the most privacy-sensitive case, use the local warning-sign result and verify the sender through another trusted channel.
Last updated: September 2, 2026.
No scanner can guarantee that a link or sender is safe.