Privacy Policy

1. What we collect

We do not ask for your real name, your postal address or any identity document, and we do not receive your card number — Stripe handles that directly.

• Account data: email address, username, password (stored only as a bcrypt hash — we cannot read it), and the date you registered.
• Verification data: the email-confirmation token we send you, and whether your address has been confirmed.
• Usage data: your activation history — which service you requested, which country the number came from, the price, the status, and the received code — plus your top-up history and balance.
• Support data: the messages and contact address in any ticket you open.
• Technical data: your IP address, which our web server and rate limiter process in order to keep the service available.
• Referral data: who invited you, and the credits earned.

2. Why we process it, and on what legal basis

• To provide the service you asked for — account, activations, balance, support. Basis: performance of a contract.
• To keep the service secure and prevent abuse — rate limiting, ban enforcement, referral anti-fraud. Basis: our legitimate interest in a service that is not defrauded.
• To comply with accounting and tax obligations relating to payments. Basis: legal obligation.
• To send you service email — address confirmation, and replies to your tickets. Basis: performance of a contract. We do not send marketing email.

3. Who else processes your data

We use these processors, and only for the purposes above:

• Our upstream SMS and email providers — receive the service and country you request in order to allocate a number or inbox.
• Stripe — card payments. Stripe is the controller of the card data it collects; we receive only a payment reference and the amount.
• NOWPayments — cryptocurrency payments, on the same basis.
• Our email provider — delivers confirmation email; receives your address and the message.
• Our hosting provider — operates the server on which the application and database run.

4. International transfers

Some of these processors operate outside the European Economic Area. Where that happens, transfers rely on the safeguards those providers offer, such as the European Commission's standard contractual clauses.

5. How long we keep it

• Account data: while your account exists, and for 30 days after you ask us to delete it.
• Activation and top-up records: retained as long as required by accounting law in our country of establishment, because they are records of a paid transaction. Received SMS codes may be deleted earlier, and you can clear your own activation history from the app at any time.
• Support tickets: two years after the ticket is closed.
• Server and rate-limiting logs: short-lived, and not used to build a profile of you.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or provide it in a portable format. You can also withdraw consent where processing relies on consent.

Write to us through the contact form on this site, from the address registered on your account. We answer within one month. If you are unhappy with our answer you can complain to the data protection authority where you live.

Note that we cannot delete records we are legally required to retain for accounting purposes; in that case we restrict them instead of erasing them.

7. Security

Passwords are stored as bcrypt hashes. Sessions use signed tokens. Traffic is served over HTTPS. Payment webhooks are verified cryptographically before any balance is credited.

No system is perfectly secure. If a breach affects your rights we will notify you and the relevant authority as the law requires.

8. Children

The service is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has registered, tell us and we will remove the account.

9. Changes and contact

We will update this policy when our processing changes; the date at the top shows the last substantive change.

Data protection contact: the contact form on this site.