Privacy Policy
Last updated November 1, 2026.
We collect the minimum needed to run GetVerifyCode: account details, wallet ledger rows, activation metadata, and SMS bodies for a limited time. This page explains what we store, how long we keep it, and how to ask for access or deletion.
What we store
Account data covers name, email, and a password hash. Wallet credits are tracked in USD integer cents. Activation rows store the service, country, status, and phone number while the window is live.
Account data stays until you request deletion, subject to legal holds. Ledger rows are kept for accounting. Full SMS bodies are kept for 30 days, then redacted to the OTP code and hash metadata.
Cookies and analytics
We set a first-party session cookie and a CSRF cookie so you can stay signed in and submit forms. They are HttpOnly where possible, and Secure in production. We do not run a third-party ad pixel in v1. When session analytics is enabled, we may load Microsoft Clarity in production to understand how the shop is used. Clarity sets its own first-party cookies on getverifycode.com. Privacy-friendly page analytics (Plausible) may be used later and does not require a cookie banner on its own.
What we do not do
We do not sell your data. We do not run a third-party fingerprint vendor in v1. IP and user agent hashes are used for abuse review and retained for about 90 days.
Processors
Payments go through Cryptomus when that flag is on. SMS delivery goes through our provider adapters on the API. The website does not call those providers from the browser. Live chat on this site is handled by Tawk.to. A message you type there is sent to Tawk.to so we can reply. We do not send your wallet balance or SMS codes through that chat. Card payments on the wallet page go through Stripe on this site. We do not store the card number.
Requests
Use Contact for access or deletion. Security issues go to abuse@getverifycode.com. Contact.
eSIM link
Get eSIM Online opens in a new tab from the eSIM link. We do not send your account, wallet, or SMS to that site.
FAQ
Questions about privacy policy
We keep your account email and name, password hash, wallet ledger in USD cents, activation metadata, and SMS bodies for up to 30 days before redaction.
Full SMS bodies are kept for 30 days, then redacted to the OTP code and hash metadata. Ledger and account rows follow separate retention rules.
No. We do not sell personal data. Processors such as Cryptomus and SMS providers only receive what they need to complete a payment or deliver a message.
Open Contact and ask for account deletion. We will remove what we can, subject to legal and accounting holds on ledger rows.
GetVerifyCode
Need a privacy request?
Ask for access or deletion from Contact. Include the email on your account so we can match the right record.