Privacy Policy
Last updated: October 14, 2026
This privacy policy explains how Scan Raccoon collects, uses, retains and protects the personal data of users of its services.
It applies to the Scan Raccoon website and, where applicable, to its browser extension, its applications, and any other service offered by Scan Raccoon.
Scan Raccoon is a service that notably allows users to analyse products available online, compare certain information about these products, and obtain indications intended to help them identify potentially interesting offers or offers presenting certain risk signals.
This policy is established in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and applicable French data protection provisions.
1. Data controller
The controller responsible for the personal data collected and processed in connection with the use of Scan Raccoon is:
Name: Scan Raccoon
Email: scanraccoon.support@gmail.com
2. Our commitment regarding your personal data
We do not sell your personal data. Scan Raccoon does not sell, rent, or otherwise trade your personal data to third parties.
However, certain data may be shared with technical service providers where necessary for the operation of Scan Raccoon, including for hosting, storage, authentication, artificial intelligence services, payment processing, IT security, or email delivery.
When you click on an affiliate link and are redirected to a merchant's or partner's website, certain technical information or identifiers necessary for tracking the redirection may be shared with the relevant partner. This processing may, in particular, allow an affiliate commission to be attributed to Scan Raccoon.
This does not mean that Scan Raccoon sells your personal data.
Processing carried out directly by merchant or partner websites after your redirection is subject to their own privacy policies.
3. Personal data we may collect
We apply a data minimisation principle and seek to collect only the information necessary for the operation and improvement of our services.
Depending on how you use Scan Raccoon, we may process the following categories of data.
a. User account data
When you create a Scan Raccoon account, we may collect:
- your email address;
- your first and/or last name, if you choose to provide them;
- your user identifier;
- your profile picture, if you choose to use a login feature that transmits it;
- the account creation date;
- information relating to your plan or subscription;
- information necessary for managing your account.
b. Signing in with Google
If you choose to create or use your account with Google, we may receive certain information associated with your Google account, depending on the permissions you grant, in particular:
- your name;
- your email address;
- your identifier associated with the sign-in service;
- your profile picture, where it is transmitted.
Scan Raccoon does not receive your Google password.
Signing in with Google is also subject to Google's own terms and privacy policy.
c. Scan-related data
When you use Scan Raccoon's scanning feature, we may process:
- images or screenshots that you voluntarily submit;
- product URLs that you submit;
- information relating to the products searched;
- the results generated by the analysis;
- the date and time of scans;
- the number of scans performed;
- technical information necessary to carry out the scan.
Images, screenshots, or information submitted may be processed by technical service providers or artificial intelligence services where necessary to provide the requested feature.
We recommend not voluntarily submitting images containing personal information that is not necessary for using the service.
d. Data relating to your use of Scan Raccoon
We may process certain information relating to your use of the service, in particular:
- the number of scans performed;
- the features used;
- interactions with the service;
- information relating to your subscription;
- errors encountered;
- information necessary for preventing abuse.
If you buy a scan pack, we process the data needed to manage it: the pack bought, the purchase date, the number of scans remaining, the expiry date and, where applicable, your withdrawal request (last name, first name, date and time). This data is kept for the periods set out in section 8.
e. Technical data
When you use our site or services, certain technical data may be automatically collected, in particular:
- IP address;
- browser type and version;
- operating system;
- type of device used;
- date and time of connection;
- session-related information;
- data necessary for the security and technical operation of the service.
f. Browser extension
If you install the Scan Raccoon extension, it works as follows:
- automatic check of the site you are visiting: to show the reputation badge on the extension icon, it reads the address of the active tab and sends only the site's domain name (for example “example.com”) to our servers. The full address, path, parameters and page content are never sent. This check is anonymous: it is not linked to your account and we do not record the list of sites you visit;
- analysis on request: when you click “Analyze this page” or use the right-click menu, the extension sends Scan Raccoon a capture of the visible part of the page, together with the title, price, seller and page address when they can be read in its code, or else the selected text, image or link concerned. This data is handled as scan data (see point c above). Nothing is sent until you ask for it;
- storage in the browser: the extension temporarily keeps, for the duration of the browser session, the result of the latest check for each tab, in order to show the badge.
The extension does not use this data for advertising, does not sell it and does not share it with third parties beyond what is necessary to provide the service (see article 6). You can uninstall it at any time from your browser.
g. Technical log of analyses and reports
To keep the service running properly, prevent abuse and be able to handle your requests if something goes wrong, we record for each analysis carried out:
- the date and time, the type of analysis (link, photo, email or phone, company), its technical outcome (successful, failed, limit reached) and whether or not it was deducted from your quota;
- the address of the link analyzed or the name of the product identified; for an email or phone check, only a masked version (the first two characters of an address, the last three digits of a number);
- a technical identifier of the analysis, the account concerned when you are signed in, and the technical cost of the analysis.
This log is kept for 90 days and then deleted automatically. It is deleted immediately along with your account if you delete it. If you report a problem with an analysis from your account, your message and a summary of that analysis are kept for 12 months so that we can review your request, then deleted (or deleted along with your account). This data is used only to check that the service works, to handle your complaints and to prevent fraud (legitimate interest); it is not used for advertising or profiling.
4. Purposes and legal bases of processing
We process your personal data only for determined, explicit, and legitimate purposes.
Depending on the processing concerned, the legal basis may be:
- the performance of a contract or pre-contractual measures;
- compliance with a legal obligation;
- your consent;
- our legitimate interest, where this does not disproportionately affect your rights and freedoms.
a. Provision of the Scan Raccoon service
We use the necessary data to: allow you to use Scan Raccoon; carry out requested scans; analyse submitted products; display results; manage your account; enforce usage limits; ensure the service functions properly.
Where applicable, the legal basis is the performance of the contract entered into with you, in accordance with Article 6(1)(b) GDPR.
b. Account creation and management
We process the data necessary for creating, managing, and securing your account. The legal basis is the performance of the contract entered into with you, in accordance with Article 6(1)(b) GDPR.
c. Managing scan limits
For free and Premium users, we may record the number of scans performed in order to enforce the limits associated with each plan. The legal basis is the performance of the contract or the terms of use of the service, in accordance with Article 6(1)(b) GDPR.
d. Managing Premium subscriptions
If you subscribe to a paid plan, we process the data necessary to manage your subscription, in particular: the plan subscribed to; the subscription status; start and renewal dates; information necessary for managing your account.
Payments may be processed by a third-party payment provider. Where payment is entirely processed by that provider, Scan Raccoon does not retain your full payment card details.
The legal basis is the performance of the contract, in accordance with Article 6(1)(b) GDPR.
e. Affiliate links and redirection to merchant sites
Scan Raccoon may offer links to merchant sites or partner platforms as part of affiliate programmes.
When you click on an affiliate link, certain technical information or an affiliate identifier may be shared with the relevant partner in order to track the redirection and, where applicable, attribute a commission to Scan Raccoon.
These commissions may contribute to funding and operating the service.
Processing carried out directly by merchant or partner sites after your redirection is governed by their own privacy policies.
f. Security and abuse prevention
We may process certain data in order to: protect Scan Raccoon against attacks; detect and prevent fraudulent use; prevent abuse of the service; prevent circumvention of usage limits; protect our users and infrastructure; ensure the security of our systems.
The legal basis is our legitimate interest in ensuring the security and integrity of the service, in accordance with Article 6(1)(f) GDPR.
g. Service improvement
We may use certain usage data to improve the performance, speed, quality of analyses, usability, features, reliability, and security of Scan Raccoon. Where possible, we use aggregated or anonymised data.
The legal basis may be our legitimate interest in improving our services, in accordance with Article 6(1)(f) GDPR.
h. Support and communication
If you contact us by email or via a form, we may process the information you provide to us in order to respond to your request.
The legal basis depends on the nature of your request and may be the performance of a contract, compliance with a legal obligation, or our legitimate interest in responding to user requests.
i. Commercial communications
We may send you communications necessary for the operation of your account, subscription, or the service.
Commercial and promotional communications will only be sent when we have an appropriate legal basis.
Where your consent is required, we will ask for it before sending commercial communications.
You may withdraw your consent or object to receiving commercial communications at any time, including by using the unsubscribe link included in the relevant emails.
5. Cookies and similar technologies
Scan Raccoon only uses cookies and similar technologies strictly necessary for the operation and security of its services, in accordance with its Cookie Policy.
Scan Raccoon does not use cookies for targeted advertising, advertising profiling, or tracking your activity on third-party sites.
For more information, see our Cookie Policy.
6. Service providers and data recipients
To provide and secure Scan Raccoon, we may use technical service providers.
Depending on the services actually used, these providers may operate in the following areas:
- IT hosting;
- data storage;
- user authentication;
- image analysis;
- artificial intelligence;
- processing of data necessary for scans;
- payment and subscription management;
- IT security;
- sending emails.
Where these providers process personal data on our behalf, we put in place the necessary contractual and organisational measures in accordance with applicable regulations.
The list of providers used by Scan Raccoon may change as the service develops.
7. Data transfers outside the European Union
Some of our providers may be established outside the European Union or process data from countries outside the European Economic Area.
Where personal data is transferred to a third country, we ensure the transfer is carried out in accordance with Chapter V of the GDPR.
Depending on the country concerned and the provider used, the transfer may in particular be based on:
- an adequacy decision of the European Commission;
- standard contractual clauses adopted by the European Commission;
- or any other appropriate safeguard provided for by the GDPR.
Where necessary, additional measures may be implemented to ensure an appropriate level of protection for personal data.
8. Data retention period
We do not retain your personal data indefinitely.
Data is retained for the period necessary to achieve the purposes for which it was collected, unless a longer retention period is required or permitted by law.
As an indication:
- user account data is retained for the lifetime of the account;
- data necessary for managing a subscription is retained for the duration of the subscription and for the periods necessary to comply with legal and accounting obligations;
- data relating to scan packs (purchase, scans remaining, expiry date) is kept for the validity period of the pack, then for the periods needed to meet legal and accounting obligations;
- withdrawal requests (last name, first name, e-mail address, date and time) are kept for five years from the request, then deleted;
- scan-related data is retained for the period necessary to provide the service and, where justified, its security;
- technical and security data may be retained for a limited period necessary for preventing and detecting abuse;
- data used for statistical purposes may, where possible, be anonymised or aggregated.
When you delete your account, we delete or anonymise the personal data associated with it within a reasonable time.
When an account is deleted, we nevertheless keep a minimal record for 12 months: the email address, the deletion date, any paid plans taken out (Standard or Premium), the fact that a subscription was cancelled at that time and, where applicable, the security status assigned to the account. We do not keep the name, the photo or the scan history. This record is used only to prevent and detect fraud and abuse (for example repeated refund requests or accounts re-created to get around the service's limits). It relies on our legitimate interest, is accessible only to the service administrator and is automatically erased after these 12 months. You can exercise your rights, including the right to object, by writing to scanraccoon.support@gmail.com.
However, certain data may be retained for longer where a legal obligation requires it or where its retention is necessary for the establishment, exercise, or defence of legal claims.
9. Your rights
In accordance with the GDPR and applicable regulations, you have, subject to the conditions set out by law, the following rights:
- right of access to your personal data;
- right to rectification of inaccurate or incomplete data;
- right to erasure of your data;
- right to restriction of processing;
- right to object to certain processing;
- right to data portability where this right applies;
- right to withdraw your consent at any time where processing is based on your consent.
You may also set directives regarding the fate of your data after your death, in accordance with applicable French law.
To exercise your rights, you may contact us at: scanraccoon.support@gmail.com
We may ask you for certain reasonable information to verify your identity and protect your account before processing your request.
You also have the right to lodge a complaint with the French data protection authority (CNIL) if you consider that the processing of your personal data does not comply with applicable regulations.
10. Account deletion
Where the feature is available, you may request the deletion of your account from your personal space settings.
You may also request the deletion of your account by contacting us at: scanraccoon.support@gmail.com
Deleting your account results in the deletion or anonymisation of the personal data associated with it, subject to data that must be retained to comply with a legal obligation or for the establishment, exercise, or defence of legal claims.
Deleting your account may also result in the loss of access to features, data, or benefits associated with it.
11. Protection of minors
Scan Raccoon is not intended for children where use of the service involves the collection of personal data for which parental consent is required by applicable regulations.
If we learn that a child has provided us with personal data in circumstances contrary to applicable regulations, we will take reasonable steps necessary to delete this information.
12. Data security
We implement appropriate technical and organisational measures to protect personal data against loss, destruction, misuse, unauthorised access, disclosure, or alteration.
These measures may include: securing access; limiting data access rights; securing communications; system monitoring; backup measures; measures to prevent unauthorised access.
However, no service accessible over the Internet can guarantee absolute security.
In the event of a personal data breach likely to result in a risk to the rights and freedoms of the individuals concerned, we will comply with the obligations set out by applicable regulations.
13. Changes to this policy
We may amend this privacy policy to reflect the evolution of Scan Raccoon, the addition or modification of features, changes to our providers, or applicable regulations.
The most recent version of the policy will be published on this page and will indicate its last update date.
In the event of a substantial change requiring specific notice to users, we will take appropriate measures in accordance with applicable regulations.
14. Contact
For any questions concerning this privacy policy, your personal data, or the exercise of your rights, you may contact us:
Name: Scan Raccoon
Email: scanraccoon.support@gmail.com