Privacy Policy

Who manages my data?

• Rinzler Labs manages any collected data
• Company registered in Scotland (SC769904)
• 5 South Charlotte Street, Edinburgh, EH2 4AN
• ICO registered: ZB548750

What data do you collect?

• E-mail address (if used instead of username)
• Error reporting data and browser agent
• Anonymised IP address and site visit data
• Payment gateway data (no card details stored)
• eSIM order details and activation codes
• SMS verification session metadata (service name, country, timestamps) — anonymised, message content deleted on session completion
• Guest session identifiers (UUID) and email address if voluntarily provided for guest purchases
• Crypton Mobile: order and subscription metadata (plan, activation status, billing periods), SIM and service identifiers from partners, and operational metadata needed for billing and support (not your message content beyond what carriers or partners supply for service operation)
• Affiliate Program: referral code, enrollment status, referral attribution metadata (timestamps, anonymised IP hashes, landing path), commission and payout records, and cryptocurrency wallet addresses you provide for affiliate payouts
• SIM return requests (long-term numbers): locker point code, name and optional address, destination country, delivery contact email and mobile number, return status, shipping payment metadata, and tracking number when available

With whom do you share data?

Your data will only be shared with our partners:

• Mapbox - custom location maps
• Stripe - credit card processing
• Plisio/Coinpayments - crypto payments
• Trustpilot - review requests
• eSIM provider - eSIM provisioning
• Virtual number provider - virtual phone numbers
• Mobile network / connectivity partners — Crypton Mobile provisioning and ongoing connectivity
• InPost (and affiliated parcel-locker carriers where applicable) — physical SIM return shipping to your selected locker

SMS Verification & Guest Data

When using our SMS Verification service or making purchases as a guest:

• Verification message content is stored temporarily during the session and permanently deleted upon session completion
• Only anonymised session metadata is retained (service name, country, timestamps — no message content)
• Guest sessions are identified by a secure UUID. No account or personal information is required
• If an email address is provided during guest checkout, it is used solely for invoicing and support purposes
• Guest session data is not linked to any user identity and cannot be used to identify individuals
• Payment data for guest purchases follows the same handling as account-based purchases — no card details are stored

Crypton Mobile

When you use Crypton Mobile we process data needed to activate, renew, and bill the service:

• Order, subscription, and payment metadata are handled like other purchases; we do not store full card numbers
• Partners that operate mobile connectivity may process routing and telecommunications metadata required to provide voice, SMS, and data; we do not sell this data or use it for advertising
• Support may reference limited identifiers (e.g. order reference, partial number) to help you
• After cancellation, we delete or anonymise data in our systems when no longer needed for legal, security, or billing obligations; partner systems may retain data under their own policies where required

Physical SIM Return

When you request return of a physical SIM card for an eligible long-term number, we process data needed to ship the card to your chosen locker:

• Locker point code, name, and optional address that you enter in the return form
• Destination country and contact email and mobile number — InPost sends pickup PINs and delivery updates directly to these contacts
• Return request status, shipping fee paid, timestamps, and tracking number once the parcel is dispatched
• We share delivery contact details and locker information with InPost (and affiliated locker networks such as Mondial Relay where applicable) solely to ship your SIM. We do not sell this data or use it for advertising
• Return records are retained for support, fraud prevention, and accounting. After successful delivery the SIM is removed from active gateway inventory in our systems

Device Data

When you enrol a device in the Partner Program, we collect and process the following device information:

• Device model, manufacturer, and Android version
• Battery level and health status
• SIM card details: operator name, country, signal strength, and slot index
• Connection metadata: IP address (anonymised), last heartbeat timestamp, and network type

Number Data

For phone numbers you provide through the Partner Program:

• Phone numbers, country of origin, and SIM slot assignment are stored for service delivery
• SMS messages routed through partner numbers to customers are handled identically to messages on our own infrastructure — content is stored only for the duration required and then deleted
• Verification SMS content is stored temporarily during the session and permanently deleted upon session completion, consistent with our standard verification policy

Financial Data

• Earnings records (amounts, transaction types, timestamps) are retained for accounting and payout purposes
• Cryptocurrency wallet addresses provided for payouts are stored securely and used solely for processing your payout requests
• Payout history is retained indefinitely for audit and compliance purposes

Customer Privacy

Partners do not have access to the personal data of customers who use their numbers:

• Customer identities are never disclosed to partners. Device identifiers shown to customers are anonymised (e.g. "PTR-XXXX")
• Partners cannot see which customers are renting their numbers or using them for verification
• SMS message content routed through partner devices is not accessible to the partner — it is transmitted directly to the customer's account

Enrollment & Referrals

When you join the Affiliate Program or use a referral link:

• We store your unique referral code, enrollment date, and program status
• When someone registers via your link, we record attribution metadata (timestamp, anonymised IP hashes, landing path) — not full IP addresses in referral records
• Referred users appear in your dashboard under a pseudonym and short referral ID — not their account number or email

Commission & Payout Data

• Commission records (payment type, gross amount, commission amount, status) are retained for accounting and payout purposes
• Cryptocurrency wallet addresses provided for affiliate payouts are stored securely and used solely for processing your payout requests
• Payout history and fraud-review signals may be retained for audit, compliance, and abuse prevention

Referred Customer Privacy

Affiliates do not receive full personal details of referred users:

• You see anonymised referral names, short IDs, and referral status — not email addresses or payment details of referred users
• We may withhold or reverse commissions if a referral is flagged as fraudulent or invalid
• Referral attribution uses a first-touch cookie (`affiliate_ref`) when visitors arrive via your link

Do you use cookies?

Yes, our website requires the use of cookies for its proper functioning, an example would be logging in to your dashboard. Cookies are text data used to verify that you are really you.

Referral cookies

If you visit Crypton via an affiliate referral link (`?ref=…`), we set a first-party cookie (`affiliate_ref`) to attribute new account registrations to that affiliate for the configured attribution window (typically 30 days). This cookie is used for program attribution only, not advertising.

How do I manage cookies?

If you do not want to save cookies from our website, you can configure your browser to block them. However, disabling cookies may hinder or prevent the use of our website, as some are used for security purposes or saving personal settings.

Access to your data

You have the right to obtain data collected in our service. To access your data:

• Login to the application
• Click on Account → Request All My Data
• Enter your password and click Request
• Download JSON formatted file with your data

Right of data erasure

You have the right to delete your personal data stored in our service. Visit your account dashboard to delete all your account data.

• Your account access will be revoked immediately
• All personal data removed immediately
• Confirmation e-mail will be sent
• Archival backups deleted within 30 days

Regulatory Oversight

We are registered with the Information Commissioner's Office (ICO) under registration number ZB548750. If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113. Our telecommunications services operate under the general authorisation framework of the Communications Act 2003 and we comply with Ofcom's General Conditions of Entitlement.

Data Retention Summary

We retain personal data only as long as necessary for the purpose it was collected. Active account data is retained while your account exists. Financial and billing records are retained for 7 years as required by UK law. Verification session message content is deleted immediately upon session completion. Anonymised metadata may be retained indefinitely for service improvement.