Your information belongs to you.

Here is exactly what we store, what we cannot read, and what happens when you share.

The core principle: Private data is encrypted in your browser before it reaches our servers. We store ciphertext. We hold no decryption key. We cannot read your private information — not under legal pressure, not under a data breach, not ever. Only you can decrypt it.

What we store

Your email address — used for authentication only (magic link login)
Public resources — information you choose to make publicly visible (stored as plaintext, by design)
Private and shared resources — stored as AES-256-GCM ciphertext; we cannot read it
Grant metadata — which share links you created, their expiry, access count; not the content
Access logs — who accessed which resource and when; visible to you in the dashboard

What we cannot read

Your encryption keys — generated in your browser, never sent to our servers
Any private or shared resource — we store only the encrypted version
Your share link tokens — stored as HMAC-SHA256 hashes; we cannot reverse them

This is enforced at the server level — our API rejects any attempt to store non-public data without client-side encryption. There is no plaintext fallback.

How encryption works

When you save private information:

Your browser generates an ECDH P-256 key pair from your BIP-39 mnemonic phrase
The data is encrypted with AES-256-GCM before leaving your device
Only the ciphertext is sent to our server
Decryption requires your mnemonic — which we never receive

Your 12-word recovery phrase is the only way to decrypt your private data. Keep it safe. If you lose it and clear your browser storage, the data is unrecoverable — by you or by us.

Access logs

Every time someone accesses a resource through a share link, we record it: the link used, the resource accessed, and the timestamp. You can see the full log in your dashboard at any time. Logs are never deleted. This is intentional — it is your audit trail.

Your rights

Access — all your data is visible in the dashboard and exportable via API
Deletion — you can delete any resource or request full account deletion
Revocation — you can revoke any share link instantly; access stops immediately
Portability — all resources are accessible as JSON
Transparency — access logs show you exactly who accessed your data and when

Medical and sensitive information

Blood type, allergies, medications, and emergency contacts are stored with "granted" visibility by default — accessible only through share links you explicitly create. You can choose to make specific fields public (for example, blood type visible to emergency responders) at your own discretion. All non-public medical data is client-side encrypted. This data may be considered sensitive personal data under LGPD and GDPR.

Third-party services

Brevo — transactional email for login codes (receives your email address)
Stripe — payment processing for paid numbers (handles card data directly; we never see it)
Umami — self-hosted, cookie-free analytics (no personal data, no cross-site tracking)

Known limitations

If you lose your recovery phrase and clear your browser, encrypted data cannot be recovered by anyone
Public resources are visible to anyone who knows your number URL
Share link URLs grant access to whoever holds them — treat them like keys
We are a small team; we cannot guarantee the same uptime as large platforms

Data retention

Account data: retained while active
Access logs: retained indefinitely (your audit trail)
Free numbers: deactivated after 30 days + 30-day grace period
Deleted resources: removable on request

Contact

For privacy questions or data deletion requests: privacy@mynumber.is

Last updated: August 2026