Privacy
A click is counted. Nothing else is kept.
Phish My Friends exists to teach a lesson, not to gather data. This page is the whole policy.
What a lure never does
A lure never opens a fake sign-in screen and never asks the person who clicked for credentials. There is nowhere on this site for your friend to type a password.
What we store about your friend
When someone opens a lure, the click itself is counted. So the same person is not counted twice, their browser is given a random ID that expires after 48 hours, and we store only a scrambled version of it. No passwords, no keystrokes, no names, no personal details. The public leaderboard shows totals per account, never anything about who clicked.
What we store about you
Your account is an email address, a display name, and the lures you have made. Delete your account and the lures go with it.
Questions
Email support@snowfishtech.com and a person will answer.