Privacy Policy

1. Data Controller

x-findmyphone Ltd. is the data controller for personal data processed through the Find My Phone website (x-findmyphone.us) and the official Find My Phone Chrome extension.

Contact: [email protected]

2. Scope (Website & Chrome Extension)

This Policy applies to all channels through which you use the Service:

• The website at x-findmyphone.us (and related production hosts we operate for the Service).
• The official Find My Phone Chrome extension published on the Chrome Web Store.
• The Find My Phone Progressive Web App distributed via the Microsoft Store (same website Service in a standalone Windows window).
• API requests, checkout, account access, and order delivery that either channel initiates against our servers.

3. Data We Collect

We collect only data necessary to operate the Service, prevent abuse, and fulfill orders—whether you submit that data on the website or via the Chrome extension.

• Phone numbers submitted for lookup (E.164 format) and selected country.
• Email address provided during checkout and account credentials metadata.
• Order, payment, and service delivery records (payment card data is handled by payment processors, not stored by us in full).
• Legal acceptance logs: agreement version, timestamp, IP address, browser user agent.
• Lookup results, carrier metadata, location/GPS report data when a secure capture is completed, and cached resolution data.
• Technical logs: IP address, request timestamps, pages visited, and error diagnostics.
• Extension-only local data: preferred site base URL (Chrome sync storage) and short-lived pending phone text after a context-menu action (Chrome local storage).

4. Chrome Extension Details

The official Chrome extension (“Find My Phone”) is a client for the same Service hosted on x-findmyphone.us. It does not operate a separate backend.

• Lookups, account sign-in, and order history use our production API and the same session cookies as the website.
• Paid reports use in-extension purchase flow that opens checkout on our website (Stripe or equivalent). The extension does not collect full payment card numbers.
• Map tiles may be loaded from map providers (for example CARTO / OpenStreetMap) solely to display location results in the extension UI.
• The extension does not sell your data, does not read your general browsing history, and does not inject advertising trackers into third-party websites.
• Host access is limited to our Find My Phone domains needed for API, session, and checkout.

5. Sources of Data

Most data comes directly from you when you submit a number, accept a legal agreement, or pay for a service—on the website or in the extension.

Carrier and network intelligence may be obtained from telecom lookup providers and prefix databases to generate reports.

Device GPS coordinates for a purchased report are obtained only when the secure SMS/location link is opened and location is shared as designed by the Service.

6. How We Use Data

We process personal data for the following purposes:

• Performing phone lookups and delivering purchased reports on the website and in the extension.
• Creating and managing user accounts after payment.
• Processing transactions and sending transactional email.
• Preventing fraud, enforcing Terms, and investigating abuse.
• Complying with legal obligations and responding to lawful requests.
• Improving reliability, security, and performance of the Platform.

7. Legal Bases (where applicable)

Depending on your jurisdiction, we rely on contract performance (delivering the service you purchased), legitimate interests (security, fraud prevention, service improvement), legal obligation, and consent (where required for lookup authorization).

8. Sharing & Processors

We do not sell personal data. We share data with trusted processors only as needed to operate the Service, under contractual safeguards.

• Payment processors (e.g. Stripe or equivalent) for checkout initiated from the website or extension.
• Email delivery providers for account and order notifications.
• Telecom lookup and infrastructure providers for carrier/location intelligence.
• Hosting, database, and security vendors.
• Map tile providers that receive only map tile requests needed to render maps (not used by us to sell personal profiles).
• Authorities when required by applicable law or valid legal process.

9. International Transfers

Your data may be processed in countries other than your own where our providers operate. Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

10. Data Retention

We retain data only as long as necessary for the purposes described above.

• Lookup cache entries expire according to configured TTL (carrier/provider dependent).
• Order and account records are kept for accounting, support, and legal compliance periods.
• Legal acceptance logs are retained for audit and regulatory purposes.
• Security logs are retained for a limited period unless investigation requires longer storage.
• Extension local/sync storage remains on your device until you clear extension data or uninstall.

11. Security

We apply technical and organizational measures including access controls, encrypted transport (HTTPS), rate limiting, and audit logging. No method of transmission or storage is 100% secure.

12. Cookies & Local Storage

On the website, we use essential cookies and browser storage where needed for session security, theme preferences, and geo-country caching. We do not use invasive third-party advertising trackers on the lookup flow.

In the Chrome extension, we use Chrome storage APIs for settings and short-lived pending phone selections as described above.

13. Your Rights

Depending on your location (including GDPR, UK GDPR, or CCPA/CPRA where applicable), you may have rights to access, rectify, erase, restrict, object, or port your personal data, and to withdraw consent where processing is consent-based.

To exercise rights, email [email protected]. We may need to verify your identity before responding.

14. Children

The Service is not directed to individuals under 18. We do not knowingly collect data from children. Contact us if you believe a child has provided personal data.

15. Changes to This Policy

We may update this Privacy Policy by posting a new version on x-findmyphone.us. The version and effective date at the top of this page will change accordingly. The updated Policy applies to both the website and the Chrome extension.

16. Contact

Privacy inquiries: [email protected]

Website: https://x-findmyphone.us