Legal · updated 3 October 2026
Privacy Policy
This policy explains what personal data getvirtualphonenumber.com ("the site", "we") processes, why, and what you can ask us to do with it. The site has no user accounts, takes no payments and runs no analytics or advertising trackers.
1. SMS received by public numbers
Every message that arrives on a public number is stored in our database with its text, the sender name, the time and the detected service, and is shown publicly on the number's page, in the API and in the MCP server. Codes are partly masked 10 minutes after arrival.
A message can contain personal data that its sender or the person who used the number put there. Messages stay on the number's page as its history. You can ask us to remove a message through the contact form.
2. Technical data
The site runs on Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes your IP address, browser user agent, the requested address and the time of the request. We do not store IP addresses in our own database and do not build profiles of visitors.
Your browser also loads fonts from Google Fonts (fonts.googleapis.com, fonts.gstatic.com) and flag images from flagcdn.com. These providers receive your IP address when the files load.
3. Contact form requests
When you send the contact form we store what you entered (request type, number, message and, if you add it, your email) and the time of the request. We use it only to handle that request and keep it for no longer than 12 months.
4. Data in your browser
Your choice of light or dark theme is saved in your browser's local storage under the key gv_theme. It stays on your device and is not sent to us. Details are in the Cookie Policy.
5. API and MCP server
The API and the MCP server need no key or account. Requests to them are processed like page requests: Cloudflare handles the technical data, and the responses contain the same public numbers and messages as the site.
6. Why we process data
We process data to run the site and its public inboxes, to keep it secure and to answer requests. Where the GDPR or a similar law applies, the legal basis is our legitimate interest in operating and protecting a free public service, and for the contact form also the handling of your request.
7. Sharing and selling
We do not sell personal data and do not share it for advertising. Data is processed by our hosting provider Cloudflare. Our database is hosted by Cloudflare with its primary copy in Western Europe; Cloudflare's network may process requests in other countries.
8. Your rights
Depending on where you live, you can ask for access to your data, correction, deletion, restriction or objection to processing, and you can complain to your data protection authority. California residents can ask what personal information we hold and ask us to delete it; we do not sell or share personal information.
Send requests through the contact form. We may ask for details needed to find the data, such as the number and the time of a message.
9. Children
The site is not intended for children. Users must be at least 18 years old, as set out in the Terms of Use.
10. Prohibited use
Public numbers must never be used for banks, financial, payment, crypto, government or identity services, or for organisations banned or sanctioned by law. The full list is in the Terms of Use.
11. Changes
We update this policy when the way the site works changes; the date above shows the current version.
Other documents: Terms of Use · Cookie Policy · Contact