Legal

Privacy Policy

Last updated: Last updated May 14, 2026

We are a privacy-first lookup service. We collect the minimum needed to bill you and keep the comments section trustworthy — and nothing else.

What we collect

When you create a web account, we store your email address and a salted hash of your password. When you subscribe, Stripe sends us a customer ID and a subscription status (trialing, active, canceled). We log a one-way hash of your IP address for rate-limiting — never the raw IP.

What we do NOT collect

We do not collect your real name. We do not collect your phone number. We do not upload or read your contacts. We do not collect your location. We never sell, share or rent your data.

Cookies

We use one cookie — `ms_session` — to keep you signed in. It is httpOnly, Secure, SameSite=Lax, and expires after 30 days. We use a second cookie — `locale` — to remember your language choice. We do not use third-party analytics, advertising, or tracking cookies.

Payments

Payments are processed by Stripe. We never see or store your card number — Stripe gives us only a customer ID and the current subscription state. Stripe's privacy policy applies to anything you give them.

AI

We do not use AI anywhere in this product. Moderation is a regex blocklist plus rate limits plus a human review queue. Your comments are never sent to a third-party AI provider.

Your rights

You can delete your account and all associated data at any time from your account page. EU and UK residents can email us at privacy@msnumber.app for a full export or deletion under GDPR Art. 15 / Art. 17.