SMSPool Privacy Statement

The data that we process is stored on our secure database; you can oversee processed data such as deposits, SMS verification history, and older rentals. If necessary, this information can be removed manually through support. All data stays with SMSPool and will not be shared with any third party. You can also find more information on our Privacy Policy.

We do not store IPs in our database, although we do store them in our access logs, which get rotated (and deleted). We store IPs without any identifying information due to DDoS attacks that we have to analyze and block.

We store all data you have entered, although we do not store previous changes. We only store what you provide us, such as your username, password, e-mail, deposit IDs, deposit amounts, refunds, and order history.

Our web server runs in an isolated space with nothing else on it. If another site gets breached, SMSPool will not be affected and will never be compromised. In the worst-case scenario, all your passwords are encrypted in BCRYPT, and security and privacy are the most important to us, so this is one of our biggest priorities.

How do you handle support e-mails?

We use Zoho to host our mailbox; if you send an email to us, they are handled by Jira and also stored on their side.

Depending on the severity of the case, we usually do not provide information regarding the user. Even if we did so, our information on a user is limited. For example, we doNOTstore IPs directly connected to the userand will never do so.

No, we don't use Google Analytics and won't ever use it. We prefer to keep our site tracker-free.

No, your phone numbers are anonymous and have no direct connection to your SMSPool account. There is no way to link the phone number to your SMSPool account, and we also offer the option to delete your account completely.

Yes. Feel free to delete your account through the settings page, and we will process your deletion.

How do you process account deletions?

Accounts that are deleted are put into a deletion queue that takes 14 days before they are entirely deleted. When your account is deleted from our system, it means that all data regarding it is removed from our system. We do not store any remaining information about your account, as it is permanently deleted. As we take database backups every two weeks, it may take another two weeks before your data is deleted from our backup servers.

How do you process sensitive payment data?

To process payments, we mainly use two payment processors, which are Stripe and Cryptomus. Regarding processing payment data, you may find more information below for each payment processor:

Cryptomus

For Cryptomus, the following data is stored on our servers:

Stripe

For Stripe, the following data is stored on our servers:

How is payment data retained on your servers?

We do not clear any payment data unless the user requests the deletion of their account. This is to maintain proper accounting of our deposits, and in case an account recovery is required, we require payment data to verify your ownership.

We are entirely PSD2 compliant for Stripe payments and do not store any credit card information on our servers; this is all processed by Stripe. Stripe may store the following data:

The last four numbers of your cardFirst name and last nameCustomer IP addressOrigin of the cardIssuer of the cardVAT ID in case providedBilling address

As far as we know, Stripe does not cycle through data and is required by law to retain it. You can find more information on their data retention policy page.