As proposed on GitHub (FriendsOfFlarum/anti-spamissues/7) a big improvement in privacy / data protection could be achieved if the StopForumSpam database would be stored locally and the calls would be made against the local copy of StopForumSpam.
This would mean a mechanism to schedule the database download and storing it locally. Introducing an option to either run it against an offline or online database. As well as the mechanism to query the local database.