Privacy policy

1. What we collect

• Account: your email address and a one-way hash of your password. We use your email only to log you in and to send the password-reset links you ask for — never for marketing. Those emails go out through an email delivery provider, which receives your address and the message, nothing else.
• Balance and orders: top-ups (amount, coin, transaction ID), one-time numbers and rentals (service, country, network, price, the number, and the messages it received).
• Support: the messages you send us and our replies.
• Technical data: short-lived security logs (IP address and user agent) used to stop abuse, kept for up to 30 days.

2. What we never collect

No name, no postal address, no identity document, no selfie, no card number, no phone number of your own. We do not use advertising trackers or third-party analytics, and the site loads no scripts from other domains.

3. Messages received on numbers

SMS received on your numbers are shown only to you. They are kept with the order so you can read them again, and deleted when you delete your account or after 12 months, whichever comes first. Staff may look at a message only to resolve a support request you made about that order.

4. Payments

Crypto payments are processed by a payment orchestrator that generates the deposit address and confirms the transaction. It receives the amount, the coin and an order reference — never your email or password.

5. Cookies

We use a handful of functional cookies: your session (to keep you logged in), a security token for forms, your light/dark theme choice, and a short-lived cookie that carries a one-time notification between two pages. No advertising or tracking cookies.

6. How long we keep data

Account data is kept while your account exists. When you delete your account, your email, password hash and messages are erased; accounting records of payments are kept without anything that identifies you, as long as the law requires.

7. Your rights

You can see your orders and payments in your account, change your email and password, and delete your account from the settings page. Customers with an active rental can also open a support ticket from their account for any other request about their data.

8. Security

Passwords are hashed with a modern algorithm, sessions are stored as hashes, the whole site is served over HTTPS with a strict content security policy, and access to the database is restricted to the service itself.