Privacy Policy

1. Our principles

We never ask for your name, identity documents or phone number.
We collect only what the service needs to work, and we keep it for as short a time as possible.
We do not sell data, show ads or use analytics or trackers.
Where there is a choice — message history, email notifications, forwarding — the choice is yours, and you can change it at any time.

2. When you visit our website

No trackers, one cookie. Browsing sets no cookies and loads no analytics or advertising scripts; every page file is served from our own domain. Signing in sets a single session cookie, which keeps you signed in and nothing else. It is deleted when you sign out and expires after 30 days without use.
Anti-bot check. The sign-in and sign-up forms load Cloudflare Turnstile from challenges.cloudflare.com to block automated attacks. It runs only once you open those forms, and Cloudflare processes technical data from your browser to perform the check. Our server only sends Cloudflare the check’s token — never your IP address or your account number.
Web server logs record the date and time, the page requested, the response code and your browser’s user-agent string. They do not record your IP address or the page you came from, and they are kept only as long as needed to troubleshoot.
Rate limiting. To protect our forms and sign-in against abuse, we use a salted hash of your IP address, kept for at most one hour and never stored with anything else.
Delivery network. Like most websites, our pages are delivered through a network provider that necessarily processes connection data, such as IP addresses, to deliver pages and protect them against attacks.

3. Your account

A random 16-digit account number and a hash of your password (Argon2id — we never see the password itself).
The sign-in methods you add: the public keys of your passkeys and security keys, and your authenticator secret (stored encrypted).
Your active sessions: a device label taken from your browser (for example “Firefox on Windows”), the sign-in method and dates — never your IP address. A session ends when you sign out or revoke it, or after 30 days without use.
A count of recent failed sign-ins, used to lock the account for 15 minutes after repeated wrong passwords.
An email address, only if you add one for notifications. You can remove it at any time.
Your notification and forwarding settings, such as a Telegram chat, an email address, an XMPP or Matrix address, a webhook URL, or the phone number your calls are forwarded to — only if you choose to forward them.
A delivery log for forwarding and webhooks: the event type, the time and the result (for example your server’s HTTP status), kept for 7 days to help you troubleshoot — never the content of the message.

4. Your numbers, payments and billing

The numbers you rent, their settings and their renewal dates.
Your balance history and top-ups: amounts, bonus, dates, the coin, the deposit address generated for each top-up and the transaction ID. Payments on public blockchains are visible to anyone by nature; Monero payments reveal much less.
Billing records of outgoing calls and texts — date, duration and cost — kept for 12 months so we can account for your balance.

5. Messages, voicemail and call history

Texts, voicemail, transcriptions and call history are kept according to the retention you choose for each number: none (messages are only forwarded), 24 hours, 7 days, 30 days or until you delete them. You can export or delete your history at any time.

With end-to-end encrypted history switched on, texts and voicemail are encrypted as soon as they arrive and can only be decrypted in your browser. We cannot read them or search them on the server, and we cannot forward messages that arrived before you set up forwarding.

6. Support, requests and reports

Customers with an active number can open support tickets from their account. We store the messages, the topic and the subject, linked to your account. Tickets are deleted 90 days after the last message, when you delete them, or when you close your account. We have no public contact form and no email address, so nothing about you reaches us through a mailbox.

Refund requests and payment reports keep what you enter — the payment reference, the transaction ID, the address and amount of a refund — together with our answer, for as long as your account exists.

Abuse reports sent from our abuse page contain the reported number, the type of abuse, when it happened and the description given — nothing that identifies the person reporting. They are kept for 12 months.

7. How we use this information

Only to provide the service you pay for: to activate and renew your numbers, route your calls and texts, deliver notifications and forwarding, account for your balance, answer support requests and prevent abuse of the network. We do not profile you, and we never use your data for advertising.

9. Requests from authorities

We can only provide what exists, and we designed Numonym so that very little does: no names, no documents, no IP addresses in our web logs, and message history only if you chose to keep it. Each request is assessed individually, and we never provide more than what is strictly required.

10. How long we keep data

Account data, sign-in methods and balance history: as long as your account exists.
Sessions: until you sign out or revoke them, or 30 days without use.
Billing records of outgoing calls and texts: 12 months.
Messages, voicemail and call history: the retention you choose, number by number.
Support tickets: 90 days after the last message.
Abuse reports: 12 months.
Forwarding and webhook delivery logs: 7 days.
Rate-limiting hashes: one hour.
Web server logs: only as long as needed to troubleshoot.

When you close your account, your data is deleted, except billing records, which are kept until their 12 months have passed, and top-up records, which we keep for our accounting without any link to you. The same information is summarized on our what we store page.

11. Your choices

Change the retention of each number, or turn on end-to-end encrypted history.
Add or remove an email address and forwarding destinations.
Export or delete your message history.
Close your account at any time.

For anything else, customers can open a ticket from their account — see how support works.

12. Security

Connections to Numonym are encrypted. Passwords are hashed with Argon2id, sign-in supports passkeys, security keys and authenticator apps, repeated wrong passwords lock the account for 15 minutes, sensitive actions require your password, and transferring or porting a number requires your PIN and your two-factor authentication — our support team cannot do it for anyone. Optional end-to-end encryption keeps your message history unreadable to us.

13. Changes to this policy

The date of the last update is shown at the top of this page. We announce significant changes in your account before they take effect, and we never lower the protection of data you have already given us without your consent. This policy is part of our terms of service.