Privacy Policy
Last updated: October 13, 2026
Ingam is a browser extension and web service that checks a payment right before it is made. To do that it needs very little information, and this page lists all of it. Ingam is operated by Guud (구드), a sole proprietorship registered in the Republic of Korea (owner Bonseung Gu, business registration no. 683-42-01672, Goyang-si, Gyeonggi-do), which is the data controller for everything described here. Contact: [email protected].
The short version
- Ingam runs only when you press a pay button on a checkout page.
- It sends the store's domain and the total, not your card, name, address or the page contents. The page text leaves your browser only when you ask the AI to read it, or when you switch on AI agent mode or a Deep seal auto-read, and card numbers, emails and phone numbers are blanked out before it goes.
- It never sells data and never uses it for advertising.
What the extension sends, and why
| Data | When | Why |
|---|---|---|
| The store's domain (e.g. example.com), the checkout page's domain | When you press a pay button, or "Check this site" | To check the seller's history and whether the payment goes where the seller says |
| The total and currency shown on the page | When you press a pay button | To spot unusual amounts |
| Your choice after a review or block (paid or cancelled) | When you choose | To remember stores you trust and to measure how often our checks are wrong |
| Reports you send ("this check was wrong", "Ingam didn't appear here", "a store scammed me": the store's domain and an optional note) | Only when you send one | To fix mistakes and to make the seal stricter on stores people report |
| An anonymous install ID, extension version and mode | With each check | To apply the free daily limit and to see whether a new version works |
| Page text from the checkout, with card numbers, emails and phone numbers blanked out first. It can still contain your name or address if the page shows them | Only when you press "Look closer with AI", when you turn on AI agent mode, or when you subscribe to the Deep seal and switch on "Read every checkout with AI". All off by default | To let an AI model (Anthropic's Claude) look for hidden subscriptions, pre-ticked add-ons, inflated totals and instructions aimed at AI agents. The text is processed in memory and not stored. The AI's short findings (which may quote a fragment of the page) are kept for 24 hours so that looking at the same checkout again costs nothing |
| In AI agent mode: the request you gave your agent (e.g. "buy one phone case under $25") | Only in AI agent mode | To compare the cart with what you asked for. Not stored |
| Your subscription status (a subscription ID and a customer ID from our payment provider) | If you buy the Deep seal | To know which install has the subscription. We never receive your card details, and we don't store your email |
What Ingam never collects
- Card numbers or anything typed into payment fields
- Your name, email, shipping or billing address
- Full web addresses (which can contain order numbers or tokens)
- Pages you visit outside a checkout
- Page contents in the default mode
Link checks (ingam.dev/check and the Telegram bot)
When you paste or share a link, our server follows it to where it ends and checks the final store. We keep the chain of website names it passed through (never the full link), the result, the source you optionally tap ("Instagram", "SMS"…), and a hashed network address or Telegram chat ID used only for a daily limit, which is cleared after two days. On a hold, the server may fetch the store's own landing page and let the AI look for scam-store signs; that page is not stored.
Network address
When the extension is installed it asks our server for an anonymous key. To stop abuse we keep a one-way hash of the network (IP) address that asked, used only to limit how many keys one network can create per day, and cleared after two days. We do not store IP addresses themselves.
How long we keep it
- Check records (domain, amount, result, your choice): 12 months, then deleted or reduced to totals per store that contain no install ID.
- Reports you send: until the issue is resolved, at most 12 months.
- Page text sent for an AI look: not stored by us. Our AI provider (Anthropic) processes it to produce the answer and, under its API terms, does not use it to train models.
- Subscription IDs: while the subscription exists, then 12 months.
How we use it
- To answer each check.
- To improve our checks, for example by learning which stores many Ingam users pay without problems.
- To publish aggregate statistics that cannot identify you (for example "Ingam stopped N payments to look-alike stores this month").
We do not sell data, share it with advertisers, or use it to build profiles of people.
Services we rely on
- Cloudflare hosts our server and database.
- To check a domain we ask public domain registries (RDAP) and may fetch the store's public /.well-known/agent-payments.json file. These requests come from our server, not from you.
- For link checks (ingam.dev/check and the Telegram bot) our server may fetch the store's own landing page to let the AI look for signs of a scam store. The page is read once and not stored.
- Anthropic provides the AI model behind "Look closer with AI" and the Deep seal. It receives the page text for that one check and nothing that identifies you.
- Lemon Squeezy handles Deep seal payments. Your card details go to them, never to us.
Your choices
- Turn checks off any time in the extension's menu, or remove the extension.
- Records are tied to an anonymous install ID, not to you. If you'd like the records from your install deleted, email us and we'll explain how to find your install ID.
Children
Ingam is not directed at children under 13 and does not knowingly collect their information.
Changes
If this policy changes in a way that affects what we collect, we will update the date above and note the change in the extension's release notes.