Privacy policy

Effective on public-beta launch. SignalCheck support: box712@protonmail.com.

Searches and source providers

Phone searches send the normalized number to the FCC. Positive public FCC evidence is cached by number, refreshed after 24 hours when queried, and may be retained longer as stale fallback evidence during outages. We do not intentionally store negative queries or a personal search history. Links are matched against our local PhishTank feed and are never opened by this service.

Accounts and billing

We store your email, subscription identifiers and status, and session tokens as hashes. Sign-in codes expire after 10 minutes. Sessions expire after seven days. Resend delivers sign-in emails; Stripe handles payments and its own billing records. We do not receive or store card details.

Watchlists, alerts, and security

Saved watchlists are linked to your account until removed. In-app alerts are retained for up to 90 days. We use keyed hashes of network addresses for short-lived abuse counters, which expire within a day and are cleaned up by scheduled maintenance. Operational logs contain route, duration, and response status, not request bodies. Cloudflare may process its own security and service metadata under its policies.

Your choices

Remove watched numbers in Account. Delete an inactive account there, or contact support for deletion while subscribed. Account deletion removes sessions, watchlists, and alerts from the live application database. Provider backups may retain prior copies under provider retention policies. Stripe may retain transaction records for its legal obligations. We do not sell query or account data, and use no advertising or tracking cookies. A necessary session cookie keeps you signed in.

Contact box712@protonmail.com for access, correction, deletion, or privacy questions. We will update this page when our practices change.