Only what
you choose to submit.

Processing

Your submission goes through the website's server to the Teger detection API. Your submission is analyzed there. The public scanner does not send the email body to a cloud AI provider or access your email account. Pressing Investigate automatically requests website previews for detected HTTP(S) links. Website URL mode also requests page-content checks. Public research remains optional.

Website checks and optional research

Live website inspection sends the submitted URL, including its path and query, from our server to that website and validated redirect destinations. Those sites can see the request and apply their own retention policies. Recognized account-action and secret-bearing links are blocked, but detection is not perfect: do not submit private or one-time links.

Public research sends up to two registrable domain names to rdap.org and the appropriate domain registries. If search is connected and you enter public search terms, only those terms go to the providers shown in the form. A fallback provider may be used if the first fails. Provider processing and retention are governed by their own terms. Do not include personal names, email addresses, account details or secrets in search terms.

The submitted email body, sender field and subject are not sent to search providers. Returned sources are displayed as text. External source pages open only when you choose their links; opening a source is your own browser request.

Automatic website previews

When you press Investigate, Teger automatically requests an InstaBox preview of the submitted website or detected HTTP(S) links in a message. Typing, opening an example and changing modes do not visit websites. Links are checked in sequence; blocked, unavailable and unfinished previews remain visible. The submitted public URL and a fixed inspection program are sent to InstaBox. A fresh machine retrieves permitted website resources and executes page scripts to collect a screenshot and bounded page observations. The website and resource hosts see requests from the machine. Never submit private links, credentials or one-time tokens.

No email body, Teger API key, browser cookies, account session, Vault secrets, saved snapshot or public desktop-sharing link is supplied to the machine. Teger requests deletion after each check and sets a three-minute server-enforced deletion timeout when creating it. The result states whether deletion was confirmed; provider operations can delay cleanup. InstaBox and hosting providers may retain operational metadata under their own policies. Closing the page does not itself confirm machine deletion.

The screenshot and observations return to this page’s memory. A screenshot can contain unverified claims and personal details from the public page. Review before downloading or sharing.

AI visual assessment

Pressing Investigate also requests a visual assessment when the service is connected and a screenshot can be captured. The captured public-page screenshot and selected browser facts are sent to Google Gemini: host names, observed redirect hosts, page title and headings, form counts and destination hosts, and your optional comparison domain. The pasted message, sender field, subject, raw URL paths and queries, browser cookies, and credentials are not included in the model request. A screenshot can itself contain personal information or a URL; do not submit sensitive pages.

The model response is requested with response storage disabled. Google Gemini may process and retain data under its applicable API policies; this is not a promise of zero retention. Visual interpretations can be mistaken and are labelled separately from recorded facts and the rule-based score. Unavailable or incomplete reviews are reported explicitly.

Retention

The public analysis route does not save submissions or results to an application database, tenant history, or audit buffer. The form and result stay in the current browser page's memory; this workflow does not write them to local storage.

Hosting providers may process request metadata such as IP address, time, and response status in operational logs. This page does not promise that infrastructure metadata is never retained.

Results and exports

Evidence excerpts use best-effort redaction. This is not a guarantee that every personal detail will be removed. Review a report before sharing it. When you choose Download report, a text file is created on your device with evidence, address hosts, website observations, public queries and sources, your comparison domain, any checklist items you marked, preview statuses, completed browser observations, and available visual interpretations with their evidence references, alternatives and uncertainties. Screenshots can be downloaded separately. Copy verification note writes the displayed note to your clipboard. The note does not include the submitted message.

The address view omits paths and query values. Checklist ticks and your result remain only in the current page's memory. Editing an input or starting another scan clears them and cancels the remaining preview queue. A check already running on the server still performs its cleanup.

Scope

The manual Chrome extension version 0.3 uses the public scanner when you choose Analyze. It stores a pending capture in Chrome session storage, consumes it when the popup opens, and ignores captures older than five minutes. Opening the popup or choosing Clear removes the pending capture; closing Chrome clears session storage. Text and results in the popup disappear when it closes. This version sends only selected message text, without automatic URL visits or cloud AI. The older 0.2 extension used a different backend and is superseded by the download at /extension. The experimental security console remains separate.

Contact

Teger AI is operated by DUKERS LTD. Contact hello@tegerai.tech with privacy questions.