Security and Data Protection
What we do to protect the data behind GotMyNumber, stated as plainly as we can. We follow UK GDPR and the Data Protection Act 2018; the privacy policy sets out exactly what we hold and why.
Encrypted connections
Every page and every request to our database goes over HTTPS, so what you type is encrypted between your device and our servers.
Data kept in the UK
Our database runs in Supabase's London region and our web servers are hosted in the UK by Krystal Hosting.
Row-level security
Database rules decide what the public site may read. Reporters' details are closed off at column level, so they cannot be read through the site.
Collect less
No account is needed to look up a number, and no IP address is stored. We keep one-way hashes instead, so we can count people rather than page loads, and the one kept with a lookup is deleted after 31 days.
No tracking
No ad network and no analytics scripts. Our own visit counter is switched off; the privacy policy explains the one leftover browser ID and how to clear it.
How We Handle Your Data
What we keep, and for how long.
Lookups
The number looked up, when, the referring page and browser type, and a one-way hash of the IP address, deleted after 31 days. No IP address.
Kept: 24 months, then deleted
Reports
The number, report type, what the reporter wrote and the call date. One-way hashes of the reporter's IP address and of its network; no name or email.
Kept: While the number's page is live, unless removed on request
Accounts
Email address and, if given, a name. Passwords are handled by the database provider's sign-in service and never seen by us.
Kept: Until you ask us to delete the account
Waitlist
An email address and the feature asked about.
Kept: Deleted after we email you at launch, or if the feature is dropped
What We Commit To
Registration
Operated by Towpath Digital Ltd (company no. 16913912). The ICO registration links to the public register entry. Security contact: security@gotmynumber.co.uk
Report a Vulnerability
Found a security problem? Tell us what you found and how to reproduce it. We read every report, reply to the person who sent it, and fix what is real. Please do not access other people's data or disrupt the service while testing.
Email: security@gotmynumber.co.uk