Privacy Policy
1. Introduction
This Privacy Policy explains how Checksms (“we”, “us”, “the Service”) collects, uses, stores and protects your personal data when you visit our website, create an account, or use our virtual phone number and SMS activation services.
By using the Service you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.
2. Data Controller
The data controller responsible for your personal data is the operator of Checksms. You can reach us at any time via [email protected] or [email protected].
3. Data We Collect
3.1. Account data
When you register we collect your name, email address and a cryptographic hash of your password. If you enable two-factor authentication we store the associated secret in encrypted form.
3.2. Service usage data
We store records of the numbers you activate or rent, the services and countries you select, the SMS messages delivered to your rented numbers, your balance, deposits, coupons and transaction history, and the support tickets you open.
3.3. Payment data
Payments are processed by third-party payment providers. We do not store your full card details; we only keep the transaction references, amounts and statuses required to credit your balance and resolve disputes.
3.4. Technical data
We automatically collect log data such as your IP address, browser type, device information, pages visited and timestamps, which are required for security, fraud prevention and troubleshooting.
4. How We Use Your Data
We use your personal data to:
• create and manage your account and keep it secure;
• provide the Service, including assigning numbers and delivering SMS messages to you;
• process payments, deposits, refunds and coupons;
• prevent fraud, abuse and violations of our Terms of Service;
• respond to your support requests;
• comply with legal obligations and enforce our rights;
• improve the reliability and performance of the Service.
5. Legal Bases for Processing
We process personal data only where we have a lawful basis: to perform the contract with you (providing the Service), to comply with legal obligations, for our legitimate interests (security, fraud prevention, service improvement), and where required, with your consent.
6. Cookies and Similar Technologies
We use strictly necessary cookies to operate the Service, including session cookies that keep you signed in and security cookies used for CSRF protection. We do not use advertising or tracking cookies.
Cloudflare Turnstile may run on our sign-in and registration pages to verify that you are human; it may collect limited device and interaction data in line with Cloudflare’s own privacy policy.
7. Sharing of Data
We do not sell your personal data. We share data only with:
• payment providers, to process your deposits;
• telephony and SMS suppliers, to the extent needed to fulfil your number orders;
• infrastructure providers such as our hosting and security vendors, under appropriate safeguards;
• authorities, where we are legally required to do so or to protect our rights and users.
8. SMS Content
Messages received on numbers you activate or rent through the Service are delivered to your account so you can complete verifications. You must not use the Service to receive messages that belong to third parties or for unlawful purposes. We may retain message metadata and apply automated abuse-prevention measures.
9. Data Retention
We keep your personal data for as long as your account is active and as long as needed afterwards to comply with legal, accounting and dispute-resolution requirements. Transaction records may be kept longer where required by law. You may request deletion of your account as described below.
10. Data Security
We apply technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), hashed password storage, optional two-factor authentication, rate limiting and access controls. No method of transmission or storage is 100% secure, but we work to protect your data and review our practices regularly.
11. Your Rights
Depending on your jurisdiction (including the GDPR and the Turkish KVKK where applicable), you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before fulfilling a request.
12. Children
The Service is not directed at children. You must be an adult under applicable law to use the Service, and we do not knowingly collect personal data from minors.
13. International Transfers
Your data may be processed in countries other than your own, wherever our servers or providers are located. Where required, we apply appropriate safeguards for such transfers.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced on this page; the version published here is the current one. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
15. Contact
For any questions about this Privacy Policy or your personal data, contact us at [email protected] or [email protected].