Privacy Policy

The short version

We only ask for the bare minimum needed to ring a phone for you. We do not sell your data, we do not build advertising profiles, and we do not share personally identifying information with third parties unless the law requires us to. If you stop using the site, the data stops mattering.

What we collect

When you use the call button, we receive the phone number you typed in, a randomly generated anonymous identifier stored as a cookie on your device, your IP address (which lets us pick the right country code and prevent abuse), and basic technical details about your browser. If you tick "remember my number", that number is also stored in a cookie on your device — not on our servers.

Why we collect it

Phone numbers are used to actually place the call you requested. The anonymous identifier and IP address help us spot abuse — repeated calls to the same number from the same browser, prank traffic, automated scripts. Browser details help us debug problems when a particular device cannot connect a call.

How long we keep it

We keep call logs for a limited operational window — long enough to investigate abuse reports and fix bugs, and no longer. Cookies on your device live until you clear them or until your browser expires them. You can wipe them at any time from your browser settings.

How we protect it

Data in transit is encrypted with HTTPS. Stored data sits on servers protected by commercially reasonable means against loss, theft, unauthorised access, disclosure, copying, modification, and accidental disclosure. No system is bulletproof — we will never claim otherwise — but we treat your data the way we would want ours treated.

Sharing with third parties

We do not sell personally identifying information. We do share data with a small number of operational service providers, and only the minimum each one needs to do its job:

• Telecom carriers — to actually place the calls you request.
• Google Analytics and Google Tag Manager — to measure aggregate site usage.
• Google AdSense and its ad partners — to display ads on the site, measure ad performance, prevent invalid traffic, and (only with your consent) personalise ads.
• Captcha protection — to block automated bots.
• Trustpilot — to render the embedded review widget.
• Hosting and infrastructure providers — to run the servers the site lives on.

In addition, we may disclose data when required to by law or in response to a valid request from law enforcement (for example, in cases of prank or harassment calls reported to the police).

Advertising and Google AdSense

Pages on CallMyPhone may show advertising delivered by Google AdSense. Whether ads are personalised or non-personalised depends on the choice you make in the consent dialog that appears on your first visit. You can review and change that choice at any time via the Manage cookie preferences link in the footer.

Google's own use of advertising data is governed by Google's Privacy Policy and described on the How Google uses cookies in advertising page. The specific cookies AdSense and its partners may set are listed in our Cookie Policy.

International data transfers

Some of our service providers — most notably Google (Analytics, Tag Manager, AdSense) — process data in the United States and other countries outside the EEA, the UK and Switzerland. These transfers rely on safeguards approved by the European Commission and the UK government, including the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and Standard Contractual Clauses where applicable.

Legal bases (GDPR)

If you are in the EEA, the UK, or Switzerland, we process your personal data on the following legal bases under the GDPR:

• Consent (Art. 6(1)(a)) — for analytics cookies, advertising cookies, and personalised advertising. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Performance of a contract (Art. 6(1)(b)) — to deliver the call you requested.
• Legitimate interests (Art. 6(1)(f)) — to prevent abuse and fraud, secure the service, and keep basic operational logs.
• Legal obligation (Art. 6(1)(c)) — to respond to lawful requests from authorities.

External links

Our pages may link to sites we do not run — Trustpilot, Google, partner services, articles. We have no control over the content or privacy practices of those sites and cannot accept responsibility for them. When you follow an external link, the destination site's policy applies.

Your rights

If you are in the EEA, the UK, or Switzerland, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data deleted (erasure / "right to be forgotten");
• restrict or object to certain types of processing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us via the contact page. We will respond within the timelines required by applicable law.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect about you, to request its deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising. We do not sell personal information for money. The display of personalised ads through Google AdSense may, however, qualify as "sharing" under the CPRA.

You can opt out at any time via the Do Not Sell or Share My Personal Information link in the footer. We honour Global Privacy Control (GPC) signals sent by your browser as a valid opt-out request.

Cookies

For a detailed breakdown of which cookies we set and why, see our dedicated Cookie Policy.

Questions or concerns

If anything on this page is unclear, or you would like us to act on a specific request relating to your data, write to us via the contact page. We read every message.