Who is responsible
SMSRota (United States) is responsible for your data. Write to [email protected] with any privacy request.
What we collect
- Your email address and a hashed password.
- Your activations: service, country, number, price, status and the code received.
- Balance movements and top-up records.
- Technical logs such as IP address and request times, kept to protect the service from abuse.
- Sign-in history and open sessions: time, method, IP address and browser of each sign-in, shown to you on the Security page of your panel.
- If you sign in with Google: your Google account ID and email address. We receive no other Google data.
- If you turn on two-step verification: the secret your authenticator app uses and hashed recovery codes.
- Messages you send through the contact form, with your name and email.
Service providers
- Google, only when you choose "Continue with Google", to confirm who you are.
- Cloudflare Turnstile, which checks that forms are sent by a person. It processes your IP address and browser signals and sets no tracking cookies.
- Our email provider, to send password reset links and replies.
SMS content
We store the content of received SMS only as long as needed to show you the code and handle complaints, at most 7 days, and then delete it.
How we use data
To run the service, prevent fraud, meet legal obligations and answer support requests. We don't sell personal data and don't use it for advertising.
Storage on your device
The site keeps your session token in your browser's local storage so you stay signed in. We use no advertising or tracking cookies.
Your rights
You can ask for a copy of your data, its correction or its deletion through the contact page. Records we must keep by law are kept for the required period.