What we store
What we store: everything we keep, on one page
Seventeen kinds of data, each with a reason and an expiry date. If it isn’t on this list, we don’t have it.
The data we store
| Data | What it contains | Kept for |
|---|---|---|
| Account | ||
| Account number | A random 16-digit identifier | As long as the account exists |
| Password | An Argon2id hash — never the password itself | As long as the account exists |
| Sign-in methods | Public keys of your passkeys and security keys, authenticator secret (encrypted) | Until you remove them |
| Sessions | Device label from your browser, sign-in method and dates — no IP address | Until you sign out, or 30 days unused |
| Email address | Only if you add one, for notifications | Until you remove it |
| Forwarding destinations | Where you send copies (Telegram username, email, XMPP or Matrix address, webhook URL) and the phone number your calls ring, if you forward them | Until you change them, or the number leaves your account |
| Numbers & money | ||
| Your numbers | The numbers you rent, their settings and renewal dates | As long as you rent them |
| Balance & top-ups | Amounts, bonus, coin, the deposit address of each top-up, transaction ID | As long as the account exists |
| Refund & payment requests | Payment reference, transaction ID, refund address and amount, our answer | As long as the account exists |
| Billing records | Date, duration and cost of outgoing calls and texts — never the content | 12 months |
| Messages & calls | ||
| Texts, voicemail, call history | Kept so you can read them — or end-to-end encrypted | Your choice per number: none, 24 h, 7 days, 30 days or until deleted |
| Delivery log | Event type, time and result of forwarding and webhooks — never the content | 7 days |
| Website & support | ||
| Web server logs | Time, page, response code, browser user-agent — no IP address, no referrer | Only as long as needed to troubleshoot |
| Sign-in cookie | One random session token, set only when you sign in | Until you sign out, or 30 days unused |
| Rate-limit hash | A salted hash of your IP address, to stop form and sign-in abuse | Up to 1 hour |
| Support tickets | Your messages, the topic and the subject, linked to your account | 90 days after the last message |
| Abuse reports | Reported number, type, time and description — nothing about the reporter | 12 months |
Never collected
What we don’t have
Not hidden, not anonymized, not “kept securely”: never collected in the first place.
- Your name or date of birth
- Identity documents or selfies
- Your personal phone number, unless you forward calls to it
- Your IP address in our web logs
- Analytics, ad trackers or tracking cookies
- Your location or contacts
Your controls
Change what we keep, anytime
Four controls in your account settings, effective immediately.
Retention per number
From “not stored at all” to “until I delete it”, applied from the moment you change it.
End-to-end encrypted history
Texts and voicemail readable only in your browser — not by us.
Export or delete
Download your history, or wipe it, in one click.
Close the account
From your security settings: everything linked to you is deleted at once.
Why do you keep billing records for 12 months?
Outgoing calls and texts are paid from your balance, so we need the date, duration and cost of each one to account for it — and to answer you if you question a charge. The content of the call or text is not part of that record.
Can you read my texts?
Only while they are stored, and only if you keep a history. Choose “none” and texts are forwarded without being kept, or turn on end-to-end encrypted history so they can only be decrypted in your browser.
What happens to my data when I close my account?
It is deleted at once: sign-in methods, sessions and balance history. Top-up records stay in our accounting without any link to you, and billing records of outgoing calls and texts are kept until their 12 months have passed.
Less data, fewer worries
Rent a number without an email, a name or a document.