This page answers the questions people actually ask us about data. It applies to legitreviewing.com and to any message you send through the site, and the edition in force is the one published in 2026. If something is unclear, write to contact@legitreviewing.com.
Who is behind legitreviewing.com?
LegitReviewing is an independent editorial project covering online financial fraud: broker platforms that are not what they claim, fake crypto exchanges, trading apps built to take deposits and nothing else, and investment groups run through messaging apps.
For data protection purposes the operator of legitreviewing.com is the controller of the information described here, meaning we decide why your information is used and how. The contact point is contact@legitreviewing.com, and a real person reads that inbox.
What information does the site collect automatically?
Very little, and none of it designed to identify you. Our host records standard server logs: the IP address, the time, the page requested, the referring page, and the browser user agent string. They exist so we can see whether the site is up, whether it is under attack, and which articles get read.
We also use aggregate analytics. That tells us a page had four thousand readers last week and most arrived from search. It does not tell us who they were. Logs rotate on the host and are usually gone within weeks.
Do you use cookies?
Yes, a short list. Some are needed for the site to function. Others are optional and run only if you consent when the banner appears.
| Category | What it does | Refusable? |
|---|---|---|
| Strictly necessary | Keeps your session stable, remembers your cookie choice, protects the form from automated abuse. | No, the site needs these. |
| Preferences | Remembers dismissed notices and display settings. | Yes. |
| Analytics | Counts visits and measures which articles are read. | Yes. |
| Advertising | Not used here. No behavioural ad targeting. | Not applicable. |
You can clear cookies in your browser at any time and block them for this site. If you do, the consent banner may reappear on every visit, because the record of your choice is itself a cookie.
What happens to what I type into the contact form?
It goes to our inbox and nowhere else automatically. The form asks for a name or alias, an email address so we can reply, and your message. Most people describe a platform they deposited into, dates, amounts, and the handles of whoever approached them.
Please do not upload passport scans, full bank statements or card details. We do not need them at this stage. If a document genuinely becomes relevant later we will say so, and the request will come from a named person.
Will my details be passed to anyone else?
Only in ways you can predict. First, technical: the companies that host legitreviewing.com, deliver our email and filter spam process the data as part of running those services, on our instructions.
Second, if you ask us to put you in touch with an independent legal adviser we pass on what the introduction requires: your name, your contact details, a summary of your situation. We ask you first. Say no and nothing is shared. After that the adviser is a separate controller with its own privacy notice.
Third, legal compulsion. A valid order from a court or regulator with jurisdiction over us gets complied with. We do not sell data and we do not trade contact lists.
How long do you keep my message?
By default, two years from the last exchange, then deletion. Long enough that if you write again eighteen months later we still have the context, short enough that we are not sitting on an archive of old complaints forever.
Exceptions apply. Messages tied to a live dispute, a challenged article or a legal claim are kept until that ends.
What is your legal basis for all this?
Under GDPR style laws: running the site securely, keeping logs and publishing journalism about fraud rest on legitimate interests. Replying to you rests on legitimate interests, or on steps taken at your request. Optional cookies rest on consent. Passing details to an adviser rests on the consent you give at that moment.
Journalism gets particular treatment in most privacy laws, and those provisions apply to what we publish. That matters when someone named in an article demands deletion of everything we hold.
I live in California, what applies to me?
The California Consumer Privacy Act, as amended. We do not sell your personal information and do not share it for cross context behavioural advertising, so those opt out rights have nothing to bite on, but we say so plainly rather than staying quiet.
You can ask what categories we collected in the last twelve months, where they came from, why, and who received them. You can ask for a copy, for deletion, or for correction. Send requests to contact@legitreviewing.com with enough detail to find your records, which usually means the address you wrote from.
What rights do I have if I am in the EU or the UK?
A broader set. The two regimes are easier to see side by side.
| Right | EU and UK GDPR | California |
|---|---|---|
| Know what is held | Yes, plus a full copy | Yes, last twelve months |
| Correction | Yes | Yes |
| Deletion | Yes, with exceptions | Yes, with exceptions |
| Portability | Machine readable | Portable format |
| Object to processing | Yes, including legitimate interests | Sale and sharing only, neither of which we do |
| Withdraw consent | Any time | Consent based activity |
| Complain to a regulator | Your supervisory authority | CPPA or Attorney General |
Requests are free unless clearly excessive or repetitive. We answer within one month in the EU and UK, and within forty five days in California, and tell you if we need an extension.
Is my data sent outside my country?
Probably, in the ordinary way of internet infrastructure. Servers, backups and mail systems may sit in a different country from yours, and content delivery networks cache pages in many regions at once.
Where information leaves the UK or the European Economic Area we rely on the standard contractual clauses approved by the European Commission, on the UK addendum where relevant, or on an adequacy decision covering the destination. Ask at contact@legitreviewing.com if you want to know which provider sits where.
How is the information protected?
The site runs over TLS, so what you type is encrypted in transit. Mailbox and administrative access is limited to the few people who need it and protected with multi factor authentication. Software is patched routinely.
Nobody can promise perfect security and we will not pretend otherwise. What we can say is that we deliberately collect as little as possible, because information never gathered cannot leak. If a breach put people at risk we would notify the relevant authority and the individuals concerned.
Do you collect data about children?
No. LegitReviewing is written for adults and is not aimed at anyone under sixteen. We do not knowingly gather information from children.
If you are a parent or guardian and think a child has sent us something through the site, write to contact@legitreviewing.com. We will find the message and delete it without asking for more than we need to locate it.
What about links to other websites?
Our articles link out constantly: to regulator warning lists, court filings, company registers, press coverage, and sometimes to the scam platform itself. Those are other people’s sites under other people’s policies.
Once you click through, this notice stops applying. Worth remembering when the destination is a fraudulent operator, since such pages are often built precisely to harvest whatever a visitor types in. Read, do not register.
Can I ask you to delete everything?
You can ask, and for correspondence the answer is usually yes. Tell us at contact@legitreviewing.com which mailbox you wrote from and the thread goes.
Published articles are different. A demand to delete an article, or to strip a company name out of one, is an editorial request rather than a data request, and it is handled under the correction and right of reply process in our terms. We do not remove accurate reporting about fraud because its subject would prefer it did not exist.
How will I know if this notice changes?
The date at the foot of the page moves whenever we revise it. Minor edits happen without fanfare. Anything significant, such as a new category of cookie or recipient, gets flagged on the site rather than buried.
We do not email everyone who has ever written to us each time a paragraph is reworded. If you need certainty about the position at a given moment, ask us for the version in force on that date.
How do I complain?
Come to us first, because most problems are quicker to fix directly. Write to contact@legitreviewing.com, say what happened, and give us a chance to answer. We aim to reply substantively within a month.
If that does not satisfy you, escalate. In the European Economic Area, to the supervisory authority where you live or work. In the United Kingdom, the Information Commissioner’s Office. In California, the Privacy Protection Agency or the Attorney General. Complaining to a regulator does not stop you pursuing anything else the law allows, and nothing published on legitreviewing.com in 2026 or any other year is intended to limit those rights.