Privacy Policy

01What we store

For an account key we keep only a fingerprint of the key and its last 4 characters. For a username account we keep the username and a password hash. We also store your member number, sign-up date, balance, the numbers you bought and the texts they received, top-up records and support messages. We never collect an email address or phone number.

The IP address used at sign-up is saved only as a hash, so we can cap each network at 3 accounts.

02Texts you receive

Messages that arrive on a number can be seen only from the account that bought it. They are not posted publicly or shown to other users.

03Account keys and passwords

Account keys are stored as a keyed fingerprint (HMAC) and passwords as a scrypt hash. The original values are not kept; at login we only check that they match. Payments are handled by a payment processor, and tomnumber never receives or holds card details.

04Cookies

We set a session cookie to keep you logged in and a cookie that remembers your language. There are no ad trackers or analytics tools on the site.

05Keeping records and closing an account

Number and top-up records stay as long as the account exists, since we need them to check refunds. To have your account deleted, log in and send a support request under the Account category. Accounts that never topped up can ask too.