We keep as little as the Service needs, for as long as it needs it, and we do not sell or share it for advertising. Here is exactly what that means.
Contents
1. What we store
When you use tix-sms.com we store:
your email address and a hashed version of your password (never the password itself);
whether your email is verified, and your two-factor secret and recovery codes if you turn two-factor on (the secret is encrypted; the codes are hashed);
your balance and every movement on it: deposits, charges, refunds, with the crypto transaction reference of each deposit;
each rental: the site, the number, the time, the price, the status, and the text of the SMS received (it contains the code);
your preferences, and the addresses from which you sign in or try to, for a short time, to block password guessing;
support tickets you send, with the email address you gave.
2. Why
To run the Service: deliver codes to you, keep your balance right, let you recover your account, stop abuse, and answer your questions. Nothing else. There is no profiling and no marketing use.
3. How long
Rental records, including the SMS text, are kept 90 days, then deleted. Balance movements are kept as long as the account exists, for accounting. Sign-in addresses used for rate limits are kept 15 minutes to one hour. Support tickets are kept 12 months.
4. Cookies
One cookie, strictly necessary: it keeps you signed in for up to 30 days. No analytics, no advertising cookies, no third-party scripts. Your browser may also keep a few device settings (sound, notifications) that never leave it.
5. Payments
Crypto deposits go through a payment processor that gives us an address for each top-up and tells us when a payment is confirmed. It receives the amount and an anonymous top-up reference, not your email or your account. Blockchain transactions are public by nature.
6. Who else sees your data
The providers that supply the numbers receive the requests needed to deliver your codes, never your identity. Our hosting provider stores the data on our behalf. Our email provider delivers the emails we send you. We disclose data to authorities only when the law requires it.
7. Your rights
You can see your rentals and balance movements in the app, and delete your account from the Account page (the record is anonymised; balance movements stay for accounting). To get a copy of your data, or to correct it, write to support@tix-sms.com from your account's email address.
8. Security
Connections are encrypted (HTTPS). Passwords are hashed with a modern algorithm, sessions and one-time links are stored as fingerprints, two-factor secrets are encrypted with a separate key, and the database is backed up every night. No system is perfect: if you suspect a problem with your account, change your password and contact us.
9. Changes and contact
We may update this policy; the date and version at the top tell you when. Questions: support@tix-sms.com.