SafeCart

Fake stores are good now. The logo, the layout, the checkout — identical to the real thing. SafeCart is the second pair of eyes that catches what you can't. The moment a checkout looks fake — a lookalike domain (paypa1, not paypal), a store registered days ago, a known phishing pattern — SafeCart warns you in plain words and locks the card field, before you type a single digit. WHAT SAFECART DOES • Fake-checkout & phishing protection — a real-time safety check on every payment page, with a clear warning when something's off. • Payment tracking — a private log of what you bought and where, so a bad charge is easy to dispute and claw back. • Breach alerts — if a store you've shopped at is breached, you're among the first to know. PRIVATE BY DESIGN — a scam-blocker that would never scam you • Runs only on checkout pages — never while you browse, read, or search. • Your purchase history stays on your device. We don't keep a copy. • Safety lookups go through a keyless proxy that stores nothing. • No ads. No trackers. No sale of your data — ever. WHO IT'S FOR: Anyone who shops online — and especially the people in your life who'd never spot a fake site themselves. SafeCart was built after a fake "Amazon" page took the founder's mum's card. It's the tell she never had. PERMISSIONS, EXPLAINED: We ask for as little as the job needs — and here's exactly why we ask for each: • Runs on the sites you visit — SafeCart has to watch checkout pages, and it can't know in advance which stores you'll shop at. It only wakes up when a page has a card field, and it never runs on Google domains. • Safety checks (Google Safe Browsing, PhishTank, domain-age lookups) — to check the site you're on against known-scam lists and flag brand-new domains. These run through a keyless SafeCart relay that stores nothing about you. • Breach checks (Have I Been Pwned) — to see whether a store you've shopped at has been breached. We only ever check the store's public domain — never your personal details. • Notifications & background timers — to alert you about a flagged checkout or a breach, and to run quiet breach checks without slowing your browsing. • Storage — to keep your settings and your private purchase log on your own device. We don't keep a copy. • Gmail (optional, read-only) — only if you connect it. SafeCart reads order-confirmation emails to confirm your purchases, parses them on your device, and never sends them to us. Skip it and everything else still works. • Account sign-in (optional) — to sync settings if you choose. Your password goes straight to the provider; our server never sees it. If a permission ever feels like more than the job needs, tell us. A scam-blocker should be the most trustworthy thing in your browser. Free. No account needed. One click to add. Spot the scam before you pay.