Safecart

Fake stores are good now. The logo, the layout, the checkout — identical to the real thing. SafeCart is the second pair of eyes that catches what you can't.

The moment a checkout looks fake — a lookalike domain (paypa1, not paypal), a store registered days ago, a known phishing pattern — SafeCart warns you in plain words and locks the card field, before you type a single digit.

WHAT SAFECART DOES
• Fake-checkout & phishing protection — a real-time safety check on every payment page, with a clear warning when something's off.
• Payment tracking — a private log of what you bought and where, so a bad charge is easy to dispute and claw back.
• Breach alerts — if a store you've shopped at is breached, you're among the first to know.

PRIVATE BY DESIGN — a scam-blocker that would never scam you
• Runs only on checkout pages — never while you browse, read, or search.
• Your purchase history stays on your device. We don't keep a copy.
• Safety lookups go through a keyless proxy that stores nothing.
• No ads. No trackers. No sale of your data — ever.

WHO IT'S FOR:
Anyone who shops online — and especially the people in your life who'd never spot a fake site themselves. SafeCart was built after a fake "Amazon" page took the founder's mum's card. It's the tell she never had.

PERMISSIONS, EXPLAINED:
We ask for as little as the job needs — and here's exactly why we ask for each:

• Runs on the sites you visit — SafeCart has to watch checkout pages, and it can't know in advance which stores you'll shop at. It only wakes up when a page has a card field, and it never runs on Google domains.

• Safety checks (Google Safe Browsing, PhishTank, domain-age lookups) — to check the site you're on against known-scam lists and flag brand-new domains. These run through a keyless SafeCart relay that stores nothing about you.

• Breach checks (Have I Been Pwned) — to see whether a store you've shopped at has been breached. We only ever check the store's public domain — never your personal details.

• Notifications & background timers — to alert you about a flagged checkout or a breach, and to run quiet breach checks without slowing your browsing.

• Storage — to keep your settings and your private purchase log on your own device. We don't keep a copy.

• Gmail (optional, read-only) — only if you connect it. SafeCart reads order-confirmation emails to confirm your purchases, parses them on your device, and never sends them to us. Skip it and everything else still works.

• Account sign-in (optional) — to sync settings if you choose. Your password goes straight to the provider; our server never sees it.

If a permission ever feels like more than the job needs, tell us. A scam-blocker should be the most trustworthy thing in your browser.

Free. No account needed. One click to add.

Spot the scam before you pay.