Privacy Policy

1. Information We Collect

Anonymity is a core principle of SMS.SB. We collect the absolute minimum information necessary to provide our services:

• •Username (required) — used for account identification and login.
• •Email address (optional) — used for order notifications, security alerts, and password recovery if provided. You can use the Platform without providing an email.
• •Password (stored as a cryptographic hash — we never store or have access to your plaintext password).
• •Transaction history — deposits, purchases, and refunds associated with your account.
• •Service usage data — countries and services selected, and order frequency.

Regarding IP addresses: we do NOT collect or store your IP address by default. Your IP is only logged temporarily if you explicitly enable the "Login Alerts" feature in your account settings, solely for the purpose of including it in the security notification email sent to you. If Login Alerts are disabled (the default), no IP data is collected or stored.

We do NOT collect or require:

• •Real name or legal identity.
• •Physical address or geolocation.
• •Government-issued identification documents.
• •Personal phone number.
• •Social media accounts or profiles.
• •Browser fingerprints or device identifiers.
• •IP address (unless you opt into Login Alerts).

2. How We Use Your Data

• •Service Delivery — processing orders, managing your account balance, applying VIP discounts, and delivering SMS verification codes.
• •Communication — sending order status updates and login alerts (only if you provide an email and enable these features).
• •Service Improvement — analyzing aggregated, anonymized usage patterns to improve service quality, pricing, and availability.

3. Payment Processing

All cryptocurrency payments are processed by third-party payment processors. The Platform does not store your cryptocurrency wallet addresses, private keys, or detailed blockchain transaction data. We only record the payment amount, status, and timestamp necessary to credit your account balance.

4. Data Sharing

We do NOT sell, rent, trade, or share your personal data with third parties for marketing or advertising purposes.

We may share limited data only in the following circumstances:

• •With third-party payment processors strictly for completing cryptocurrency transactions.
• •When required by law, valid legal process, or enforceable government request.
• •To prevent fraud, protect Platform security, or enforce our Terms of Service.

5. Cookies & Local Storage

We use minimal browser storage:

• •Session cookies — required for authentication and maintaining your login state.
• •Local storage — used for language preferences and UI settings.
• •We do NOT use third-party tracking cookies, advertising pixels, or analytics trackers that identify individual users.

6. Data Retention

• •Account data is retained for the lifetime of your active account.
• •Transaction records are retained for 2 years after account deletion for legal compliance and dispute resolution purposes.
• •Login Alert emails (including IP data) are sent directly to your email and are not stored on our servers.
• •You may request complete account deletion at any time by contacting our support team.

7. Data Security

We implement industry-standard security measures to protect your data:

• •All data transmitted between your browser and our servers is encrypted using TLS/SSL.
• •Passwords are hashed using bcrypt with appropriate cost factors.
• •Database access is restricted and monitored.
• •Regular security reviews and vulnerability assessments are conducted.
• •API keys are generated using cryptographically secure methods.

While we take reasonable precautions, no system is 100% secure. You are responsible for keeping your account credentials confidential.

8. Your Rights

You have the right to:

• •Access — view the personal data associated with your account.
• •Correction — request correction of inaccurate or incomplete data.
• •Deletion — request deletion of your account and all associated data.
• •Export — request an export of your transaction history.
• •Objection — object to specific data processing practices.

To exercise any of these rights, contact our support team. We will respond to verified requests within 30 days.

9. Children's Privacy

The Platform is not intended for, and must not be used by, individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware that a user is under 18, their account will be terminated immediately.

10. International Data

The Platform operates globally and your data may be processed in jurisdictions different from your own. By using the Platform, you consent to the transfer and processing of your data across borders.

11. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be communicated via the Platform. The revised date at the top of this page indicates when the policy was last modified. Continued use of the Platform after changes constitutes acceptance.