Trust & Transparency

Who we are

Spotter is made by Marcode, a fraud detection platform founded in 2023 and based in London, near Borough Market.

We built Marcode after spending over a decade in marketing and watching ad fraud spiral out of control. Today, our platform helps major retail brands detect and stop fraudulent advertising before it costs them money — and before it harms their customers.

Spotter is the consumer side of that mission. It lets us see what real people see when they browse the web, so we can catch scam ads faster and shut them down before they do damage.

Registered UK Company

Company name: Marcode Ltd
Company number: 15046325
Address: Unit 420, 30 Great Guildford St, London SE1 0HS

Verify on Companies House

What we do with ad data

Let's be specific about what happens when Spotter scans an ad.

We collect

The ad content (title, description, links, images)
Advertiser details (who paid for the ad to appear)
The page URL or search keyword where the ad was displayed

We never

Collect your browsing history
Access login credentials or form data
Sell your data to third parties
Store anything that personally identifies you

We use this data to:

1

Report directly to advertising platforms

When we spot a scam ad, we flag it to Google, Meta, and other platforms so they can remove it.

2

Alert the brands being impersonated

Fraudsters often hijack legitimate brand names or run fake shops. We notify those brands so they can take action — and in many cases, they already have a commercial relationship with the fraudster, which makes enforcement faster.

The goal is simple: see the ad, analyse the ad, strip out anything personal, and use the intelligence to stop fraud. That's it.

Your data dashboard

Every Spotter user has access to a personal dashboard showing:

Every ad we've analysed from your browsing
Exactly what data was captured
When it was sent
What it contained

Nothing is hidden. If you want to see precisely what Spotter sees, it's all there.

View your dashboard

Spotter Dashboard

247 Ads scanned

How this differs from screen capture tools

You might have heard of tools like Windows Recall that capture screenshots of everything you do. Spotter is fundamentally different.

We don't capture your screen. We don't record your activity. We don't monitor what you're reading, typing, or doing.

When an ad loads on a page, Spotter extracts only that ad and its immediate context — then discards everything else. Your emails, your banking, your documents, your messages — we never see any of it.

Screen Capture

mail.google.com/inbox

🔒 Private content

Captures everything

Spotter

best headphones

Ad

Only the ad

SOC 2 Type II

Security credentials

Marcode holds SOC 2 Type II certification for Security, Confidentiality, and Availability — and the entire Spotter platform falls within the scope of that audit.

In plain English: an independent auditor reviewed our systems, policies, and practices over an extended period and confirmed we do what we say we do when it comes to protecting data.

Learn more about SOC 2 certification

SOC 2 (Service Organization Control 2) is a security framework developed by the American Institute of Certified Public Accountants (AICPA). It sets rigorous standards for how companies should protect customer data.

Type II is the more stringent version. While a Type I audit checks whether security controls are properly designed at a single point in time, a Type II audit evaluates whether those controls actually work effectively over a sustained period — typically six to twelve months.

Our certification covers:

Security

Systems and data are protected against unauthorised access

Confidentiality

Sensitive information is handled appropriately and kept private

Availability

Our systems are reliable and accessible when needed

View our Trust Centre

Verified payouts

We pay real money to real users via Amazon gift cards or PayPal.

£25 Amazon Gift Card

Weekly Draw Winner

£5 PayPal Transfer

Milestone Bonus

Winner screenshots coming soon — we're a new platform building our track record.

All winners are selected randomly and announced publicly. If you'd like to verify a specific payout, contact us with the winner's public username.

Prize draw transparency

We believe you deserve to know your actual odds. Here's how the draw works:

Weekly prize

£100 total, split among 4 winners (£25 each)

Selection method

Random selection from all users who met the 50-ad activity threshold that week

Current odds

Published live in your extension dashboard View your current odds

Verification

Winners announced publicly. Selection algorithm available for inspection on request.

We're a small platform right now. That means your odds are better than they'll ever be. As we grow, odds will decrease — we're being upfront about that.

Frequently asked questions

Why should I trust you with my browser data?

Three reasons: we're a registered UK company you can verify, we're independently audited to SOC 2 Type II standards, and our business model depends on ad data — not personal data. Violating your privacy would destroy the trust our business requires.

Can I verify your company registration?

Yes. Search "Marcode Ltd" or company number 15046325 on Companies House.

Who audited your SOC 2 certification?

Our SOC 2 Type II audit was conducted by an accredited third-party auditor. Details are available in our Trust Centre.

What if I want my data deleted?

Contact us at [email protected] and we'll delete all data associated with your account within 30 days.

Do you sell data to advertisers?

No. We use ad intelligence to help brands and platforms remove fraudulent ads. We do not sell personal data, browsing data, or any data that identifies individual users.

How long do you keep data?

Ad data is retained for analysis and pattern detection. Personal account data is deleted upon request or within 90 days of account closure.

Questions?

If you have questions about our security practices, data handling, or anything else, you can reach us at [email protected].

We're a small team. Real humans read and respond to every message.