Privacy Policy

Last updated 4 September 2026

We ask for no identity data, so there is very little about you to hold. This page sets out the little there is.

What does OTPDrop not collect?

No name, no email address, no phone number, no identity document, no payment card. There is no KYC step, and no stage of signup or purchase asks for any of it. We never hold your seed phrase — only a cryptographic hash that lets us recognise it when you log in.

What data does OTPDrop hold?

• Your account record — its identifier, the hash of your seed phrase, your balance, and the creation date.
• Your orders — the service and country, the number issued, the price, timestamps, and any SMS text delivered to that number.
• Your deposits — the coin, the address issued to you, the amount, and status.
• Support tickets you choose to open, including whatever you write in them.
• Server logs — IP address, timestamp, and requested URL, kept briefly to fight abuse and to keep the service up.

Can OTPDrop read the SMS you receive?

A message sent to a number you rent passes through our systems, and we can technically read it. We use it only to show it to you. Treat any number here as a public mailbox and never have anything sensitive or private sent to it.

Message content is deleted with the order record.

How long is data kept?

Order and message records are kept for 90 days, then deleted. Server logs are kept for 30 days. Account and deposit records are kept while the account is open.

Who else sees your data?

We do not sell your data and we do not share it for advertising. We do not use third-party analytics or advertising trackers, and the site sets no tracking cookies — the only cookie is the one that keeps you logged in.

Numbers come from upstream carriers, who necessarily process the traffic to the numbers they supply. We may disclose records where a valid legal order compels us to, and we can only ever disclose what we hold, which is listed above.

What does a crypto payment reveal?

Cryptocurrency transactions are recorded on public blockchains outside our control. We cannot delete or alter them, and anyone can inspect the chain. Consider this before funding from an address tied to your identity, such as one at an exchange that has verified you.

Can you request deletion of your data?

Because accounts hold no identity data, we cannot connect an account to a person, and we cannot act on a data request we have no way to authenticate. You can delete your own data by opening a ticket from the account in question and asking us to close it.

Contact

Privacy questions go to [email protected].