SMSPing Privacy Policy

1. What SMSPing is for

SMSPing provides temporary phone numbers that receive SMS verification codes. Intended uses:

• Privacy protection — sign up for services without exposing your personal phone number.
• Development and testing — test SMS/OTP flows in your own apps.

Prohibited: fraud, impersonation, spam, circumventing other platforms' limits, bans or terms, and any illegal activity. We may suspend accounts used this way.

2. Data we collect

• Account: email address and a hashed password (we never store your plain password). Login sessions use an HttpOnly cookie.
• Google Sign-In (optional): Google shares your account ID, verified email and name. We never get your Google password, mail or contacts.
• Orders: service/country chosen, number assigned, received SMS content, order status, refunds, balance and transaction history.
• Top-ups (crypto): We mainly accept USDT (TRC20/ERC20/BEP20) and also support TRX, ETH and BNB. We record the network, coin, amount, the deposit address issued for your order and the on-chain transaction hash. Blockchain transactions are public by nature; we do not control that data.
• Support tickets: your messages, linked orders and our replies.
• Technical data: IP address, browser/user agent, request logs and security signals, used for security, abuse prevention and debugging.
• Attribution: first-visit source (utm_* parameters and referrer) stored in your browser (localStorage) and associated with signup/funnel events, to understand which channels bring visitors.
• Browser storage: localStorage holds preferences (e.g. favorite services) and attribution data. Clearing it does not delete your server-side account.
• Telegram (bot @smspingnetbot / Mini App), if you sign in with Telegram: your Telegram user ID, first name, last name, username, language code and profile photo URL, linked to your SMSPing account, plus last-login time. We do not store Telegram's raw launch data or your messages to the bot; we keep only one-time login hashes (deleted when they expire) and bot update IDs used to avoid processing the same update twice.

3. Third parties we rely on

• Cloudflare — hosting, CDN, security and the Turnstile bot check (processes IP and device signals).
• Google — optional sign-in.
• Number providers (e.g. 5sim) — supply the numbers; they receive the service/country of your order and deliver the SMS. They do not receive your email or password.
• Resend — email delivery; account emails are sent from [email protected], and your email address is passed to Resend for that purpose.
• Telegram — if you use our bot or Mini App.
• Blockchain networks — for crypto payments.

We do not sell your personal data and do not use third-party analytics or advertising trackers; visit statistics come from our own first-party request logs.

4. How we use data

To provide and bill the service, process refunds, prevent fraud and abuse, provide support, secure the platform, and improve it (aggregate channel/funnel statistics).

5. Retention

• Account, orders, top-up records and received SMS content: kept while your account exists, so you can review your order history. You can ask us to delete them by emailing [email protected].
• Web server access logs (including IP addresses): rotated and deleted after about 14 days.
• Application logs: retained for a limited period and overwritten on a rolling basis.
• Database backups: deleted after about 14 days.
• Temporary data (login sessions, verification codes): deleted when they expire.
• Support tickets: retained only as long as needed to provide the service and prevent abuse.
• Browser data (preferences, attribution): stays on your device until you clear it.

6. Your choices

You can log out (revokes current session), change your password (revokes all sessions), clear browser storage, or ask us to access or delete your account data by emailing [email protected]. Some transaction records may be retained where required for accounting or abuse prevention.

7. Changes

We will update this page when our practices change and revise the date above.

8. Contact

[email protected]