Your privacy, explained.
Last updated: 12 October 2026.
Who we are
CyberShield JA (cybershieldja.com) is a Jamaican scam-intelligence and cyber-safety service operated by Joel Nelson. Questions or privacy requests: support@cybershieldja.com.
What we collect
Account: your email address and sign-in details, held by our authentication provider, plus our own security record for your account (role, multi-factor settings and active sessions). Reports you submit: your description, the indicators you enter (for example phone numbers, accounts or websites), evidence images and optional scam wording. Optional items you choose to save, such as enhanced search history or plan interest. Security and audit records of sign-ins and administrative actions.
Community intelligence and search
Basic search queries are processed without being stored as search history. Aggregate search events contain no query, IP address, account or device identifier. Reported indicators are encrypted and indexed with keyed hashes. Public indicator labels minimize phone, email and wallet details.
Reports and private evidence
Report narratives and evidence images are encrypted and visible only to you and authorized moderators. Images are re-encoded to remove metadata and are never published in public results. Original filenames are not retained. Approved reports contribute counts, dates, categories and masked connections to public results; raw reports, evidence and reporter identity are never published. Optional scam wording contributes a keyed exact-match fingerprint and an encrypted, expiring signature of keyed phrase tokens. Only published reports are eligible for comparison.
Account emails
Verification, sign-in and password-reset emails are sent from accounts@cybershieldja.com by our authentication provider through Amazon Simple Email Service. We do not send marketing email, and we do not sell or rent personal information.
Password privacy
When you use the password check, your password never leaves your browser. Your browser sends only a five-character hash prefix to the Have I Been Pwned service and compares the results locally.
Optional plan interest
With your consent, we record your email, chosen upcoming plan, signup source and consent version. Your email is encrypted and is not included in administrative aggregate analytics. This does not create an account, payment or subscription. Contact support to withdraw interest or request deletion.
Monitoring and groups
Saved enhanced search history is opt-in and encrypted. Family membership shares eligible feature access, not personal history. Business members share registered asset summaries. Joining does not disclose personal reports, evidence or searches.
Guest reporting
You can report without an account. A private access code permits limited access to your report; we retain a keyed digest, not the raw code. Optional contact email is encrypted and never creates an account. Guest reports are private until reviewed, and account claiming requires both the private code and a verified sign-in. Guest submission uses Cloudflare Turnstile to check for automated abuse; Turnstile processes technical browser and device signals under Cloudflare's privacy policy. CyberShield does not send your IP address in its verification request to Cloudflare. Short-lived abuse counters store keyed values, not raw IP addresses.
Features not currently offered
Screenshot and OCR analysis, AI-assisted analysis, external link-reputation lookups, email breach monitoring and payments are not currently active. We will update this notice before any of them is enabled.
Where your data is processed
Our application, database, encrypted evidence storage and email delivery run on Amazon Web Services in the United States (us-east-1). Sign-in is provided by Supabase, also hosted in the United States. Data is encrypted in transit and at rest, and administrators must use multi-factor authentication.
Deletion and accountability
Account data deletion removes your reports and owned groups, queues private evidence deletion and recalculates affected watch intelligence. Moderation decisions remain as an accountability record. Anonymous aggregate search events remain. Deleting your CyberShield data does not delete your sign-in identity with our authentication provider; contact support to remove it.
Your choices and requests
You can review and delete your data through account settings, or contact support@cybershieldja.com to request access, correction or deletion of your personal data, consistent with Jamaica’s Data Protection Act, 2020. We will respond within a reasonable time.
Changes to this notice
We will update the date at the top of this notice when it changes, and will update it before enabling any feature listed as not currently offered.