What to do
Privacy
Updated 24 September 2026
This site is static pages plus two small scripts. They do not upload the code or the word.
What stays on your phone
The QR tool reads the image in the page. The safe-word list is picked with the browser’s own random-number generator.
What may be counted
We count visits with Umami, an open-source analytics tool that runs on our own server. It records the page viewed, the site that sent you, your country and city (worked out from your IP address, which is not stored), and your browser and device type. It sets no cookies, builds no advertising profile, and the numbers are never sold or shared.
Photographs
The pictures on these pages were made for the site. They are not your package and not a live camera feed.
Contact
hello@malwarezero.org. Please do not email a full card, an ID, or a QR that might still be live — a crop of the wording is enough.
Quick answers
- Do you store my QR photo?
- No. It never leaves the browser.
- Should I email a screenshot?
- A crop of the wording is enough. Never a full card or ID.
This is general safety information, not legal advice. Scams change. If you need an official desk: FTC ReportFraud or IC3.