Privacy Policy
Last updated October 29, 2026
This policy explains what receivesmsonline.us (“we”) collects when you use receivesmsonline.us, why, and the choices you have.
1. What we collect
- Account data: email address, password hash (or your Google account identifier if you sign in with Google), sign-in timestamps.
- Billing data: handled by Stripe. We store your Stripe customer id and subscription status, never your full card number.
- Messages: the sender number, text and attachments of SMS/MMS received on your number, with timestamps.
- Technical data: IP address, browser type, and pages visited, including Google Ads conversion events on the marketing page.
2. How we use it
- To provide the Service: assign numbers, deliver messages to your inbox, bill your plan.
- To prevent fraud and abuse, including card verification during the free trial.
- To measure advertising performance (Google Ads).
- To respond to support requests and send service emails (receipts, payment failures).
3. Service providers
- Google Cloud and Firebase (United States): hosting, authentication, database. Data is encrypted at rest and in transit.
- Stripe: payments and card verification.
- A US telecommunications carrier: number provisioning and message delivery.
- Cloudflare: DNS and edge network.
- Google Ads: conversion measurement on the marketing page only. We honor Global Privacy Control signals.
4. Retention
Messages are kept while your plan is active and deleted when the plan ends and the number is released. Account and billing records are kept as long as your account exists and for up to 7 years afterwards where required for tax and accounting.
Pay-per-request API (/api): there is no account. Message bodies, extracted codes and attachments are encrypted at rest and permanently erased within minutes of the number expiring or being released; they are never written to logs or analytics. We keep only the payment record (amount, network, transaction hash, payer address) for accounting, unlinked from the number and its messages at deletion. Access tokens are stored only as a one-way hash.
5. Your rights
You may access, correct or delete your data by emailing support@receivesmsonline.us. Deleting your account ends all plans (amounts due under the Terms remain payable), releases your numbers and deletes your messages. California, Virginia, Colorado and EU/UK residents have additional rights under applicable law, which we honor.
6. Cookies
We use strictly necessary cookies for sign-in and language preference and, on the marketing page, Google Ads cookies for conversion measurement. We do not use third-party advertising cookies in the app.
7. Children
The Service is not directed to anyone under 18 and we do not knowingly collect data from children.
8. Changes and contact
We will post changes on this page. Questions: support@receivesmsonline.us.