Local preferences
Favourites are saved locally in this browser. Language preference is stored in a site cookie so an explicit language choice remains consistent. Country detection uses hosting metadata to choose the initial language; the application does not save a visitor's country for that purpose. Live orders and SMS details are not stored as local demo history.
Sign-in and security emails
Google sign-in requests your Google identifier, name, profile image and email address to authenticate your ReceiveSMSGo account and display your profile. We do not request Gmail messages or contacts. Supabase manages account identities, hashed email passwords and sessions. Essential session cookies are HttpOnly. Resend processes recipient email addresses and transactional verification, recovery and security emails. Your Google password is never entered into ReceiveSMSGo.
Account controls
Account security lets you update your name, change your password or email address, and sign out of all sessions. Email changes require confirmation through both old and new inboxes. You can also withdraw Google access through your Google Account connections settings.
Optional analytics
With your permission, GA4 measures visits, service/number-country selections, direct checkout, confirmed SMS sales/refunds and confirmed live wallet deposits. It may receive service, number country, USD amount and a one-way transaction reference; it never receives account identity, phone numbers, SMS, card details or provider credentials. Wallet deposits are separate from SMS sales to avoid counting revenue twice. Page queries/fragments are removed, and account/auth/callback pages are excluded. No Google tag loads before consent. Advertising consent, Signals and detailed location/device collection remain off. Preferences and anonymous receipt deduplication are retained for up to 180 days and removed when consent is withdrawn. Receipt delivery requires an open public page and may be blocked by browser privacy tools.
Account and transaction records
The authenticated workflow associates quotes, orders, wallet entries and deposits with the signed-in user. Ownership checks restrict access. Server secrets remain outside client bundles. Payment credentials are handled by Stripe or NOWPayments; card details are not stored in the ReceiveSMSGo application.
SMS and provider access
An SMS rental may involve the selected provider and destination service. Paid access is not a guarantee that no third party can ever view a message. Do not submit banking codes, sensitive recovery codes or information you do not need for the authorized task.
Active audit mirror
D1 is the primary wallet and order database. The active Supabase audit mirror receives minimal order identifiers, ownership, service/country, amounts, status, timestamps and versions through server-only access. It excludes phone numbers and SMS contents and does not replace the primary wallet ledger.
Retention and contact
Operator-specific retention periods, privacy contact details, legal basis and user-request procedures need to be finalized before full commercial use. The current publication does not claim a completed legal compliance programme. Consult the destination and provider privacy notices as well.