Version 1.0 · Effective 13 October 2026

VSIM privacy policyWe keep what an order needs. Nothing to sell.

VSIM keeps the minimum an order needs: your email, an optional name, a hashed password, your sign-in IP addresses, your balance history and your orders. It sets one session cookie, loads no analytics or advertising trackers, deletes the full SMS text 24 hours after an order closes and never sells data.

Follow your data Copy or delete my data
  • 1cookie
  • 0trackers
  • 24 hSMS text life
  • 0data sold
privacy-scan · this page, right now

Clean5 checks · 0 trackers found

  • Servers this page talked tovsim.co only
  • Third-party requests0
  • Analytics or ad scripts0
  • Cookies a script can read0
  • Saved in your browsertheme choice

Measured by your own browser when you press Rescan. Nothing here is sent anywhere.

Privacy facts

What is on VSIM's privacy label?

Like the nutrition label on a food pack, for your data. Every figure was counted from VSIM's own code on 13 October 2026.

  • A

    11 is the whole list. Each item, how it is stored and when it goes is in the journey and the time machine.

  • B

    The one cookie dies with your browser. It keeps you signed in and nothing else. See it.

Privacy Facts

Per VSIM account Version 1.0

Personal data kept A
11 items
Temporary data
4 items, deleted automatically
Cookies B
1
Third-party trackers C
0
Ads shown
0
Data sold, rented or traded
0
Personal fields sent to number suppliers
0
Email shared with D
NOWPayments and Formspree, only if you use them
Marketing emails
0
Minimum age
18

Counted from VSIM's code on 13 Oct 2026. A change to any line changes the version number.

  • C

    Zero means none. No Google Analytics, no Meta Pixel, no ad network. Even fonts and icons come from VSIM's own server.

  • D

    Your email leaves only when you choose. NOWPayments gets it for a payment receipt, Formspree if you use the contact form. See the exact request.

Your data's journey

What does VSIM record at each step?

Ride the line from your first visit to account deletion. Each stop shows what boards your record, and what never gets on.

Stop 02 of 8

You create an account

The account starts with your email, an optional name and a hashed password. We note the IP you signed up from and the page that brought you.

Boards your record 6

  • Email addressyou@example.comStored as is · Until you delete the account
  • Name (optional)AlexStored as is · Until you delete the account
  • Password$2y$10$Qe7…kX2One-way hash · Until you change it or delete the account
  • Sign-up and last sign-in IP203.0.113.24Stored as is · Until you delete the account
  • First page and referring site/virtual-number/ · google.comStored as is · Until you delete the account
  • Rate-limit fingerprintsa1f3…9c07One-way hash · 24 hours

Never boards

  • No phone number
  • No ID document or selfie
  • No date of birth

Time machine

What is left of your data after an hour, a day, a month?

Drag the slider forward from the moment an order closes. Fields that expire are shredded on the spot.

Time after your order closes

Your order just closed. Everything below exists, including the full SMS text and any reset link you asked for.

  • Email addressyou@example.comStored as is
  • Name (optional)AlexStored as is
  • Password$2y$10$Qe7…kX2One-way hash
  • Sign-up and last sign-in IP203.0.113.24Stored as is
  • First page and referring site/virtual-number/ · google.comStored as is
  • Balance and its history+$5.00 · −$0.93Stored as is
  • Top-up recordsNOWPayments · $5.00 · paidStored as is
  • One-time ordersTelegram · UK · 48291Stored as is
  • Full SMS textYour Telegram code is 48291…Auto-deleted
  • Permanent number loginss1:9fQ2c…Xa=Encrypted
  • Fault reportsGoogle asked for a phone checkStored as is
  • Tickets and attachmentsTicket #128 · screenshot.pngStored as is
  • Password reset link9c41…e07bOne-way hash
  • Rate-limit fingerprintsa1f3…9c07One-way hash
  • Session cookievsim2_sidStored as is

What leaves

What exactly does VSIM send to other companies?

Not a summary: these are the fields VSIM's code sends to each outside company. Blacked-out lines are the ones it never sends.

VSIM server → supplierwhen you buy a number
  1. requestorder one number
  2. countryengland
  3. carrierany
  4. apptelegram
  5. max price0.93
  6. your emailnever sentnever sent
  7. your IP addressnever sentnever sent
  8. your name or account IDnever sentnever sent

Our server asks for the number on your behalf. The supplier sees a VSIM order, never you.

Protection

How is your data protected?

Five layers between your data and anyone who should not see it. The hash lab shows the most important one working, right in your browser.

Hash lab

What our database would keep (SHA-256)

a hash appears here

Change one letter and the whole fingerprint changes. It cannot be turned back into your text, which is why a stolen database would not reveal your reset links or password.

Hashed: one-way

Password (bcrypt, slow on purpose), reset links, rate-limit keys.

Encrypted: two-way

Permanent number logins, so we can show them back to you.

No system is perfectly secure. If we find a breach that affects your account, we will tell you by email and on the site.

Never collected

What does VSIM never collect?

Some data would make an account easier to verify and far riskier to hold. We built VSIM without it. Open any drawer: they are empty on purpose.

8 drawers, 0 files inside

EmptySign-up asks for an email, not a phone. That is the point of a virtual number.

EmptyThere is no identity check to create an account.

EmptyWe accept crypto only, paid on the gateway's page.

EmptyNobody at VSIM will ever ask for them. Anyone who does is not us.

EmptyVSIM is a website. It asks for no device permissions.

EmptyYou confirm you are 18 or older. We do not ask for the date.

EmptyNo Google Analytics, no Meta Pixel, no ad network. Fonts and icons are served by VSIM itself.

EmptyWe receive SMS only for the numbers on your orders.

Cookies and browser storage

Which cookies does VSIM use?

One. Below is exactly what your browser's developer tools show on vsim.co, and no cookie banner because there is nothing optional to agree to.

Storage

Cookies set by vsim.co
NameValueDomainExpiresHttpOnlySecureSameSite
vsim2_sid8f2c…d41avsim.coSession✓✓Lax

1 row. Keeps you signed in and holds the captcha answer and form token. Deleted when you close the browser.

  1. 1Press F12 (Cmd+Option+I on a Mac)
  2. 2Open Application, then Cookies
  3. 3Pick vsim.co: you will see one row

Your controls

How do you get a copy of your data or delete it?

Pick what you want. We write the ticket for you; a person checks it comes from your own account and replies in the same ticket.

New ticketSubject: Privacy request

Hello, please send me a copy of the personal data VSIM holds for this account.

We reply in the same ticket with your data.

Open a ticket

Do it yourself, right now

See your orders and balance Change your password

How a deletion runs

  1. You askFrom a ticket inside your account, so we know it is you.
  2. Balance checkSpend it first: balance cannot be withdrawn.
  3. We deleteEmail, name, IPs, tickets, reports and permanent logins.
  4. We confirmIn the ticket. Orders and top-ups stay, without your email.

Plain words

What do the technical words on this page mean?

Short definitions, each with where it shows up at VSIM.

Encryptionnoun

Scrambling data with a key so that whoever holds the key can turn it back.

At VSIMPermanent number logins are encrypted, so we can show them back to you.

Hashnoun

A one-way fingerprint of a text. The same text always gives the same hash, but a hash cannot be turned back into the text.

At VSIMPasswords (bcrypt), reset links and rate-limit keys (SHA-256).

Read more on Wikipedia
HttpOnlycookie flag

A setting that hides a cookie from the scripts running on a page, so a malicious script cannot steal it.

At VSIMSet on vsim2_sid, the only VSIM cookie.

Read more on Wikipedia
Payment gatewaynoun

The company whose page takes your payment and tells the shop it arrived.

At VSIMHeleket and NOWPayments, both for crypto.

Personal datanoun

Any information that can be tied to you, such as an email or an IP address.

At VSIMThe 11 kept items on the Privacy Facts label.

Rate limitnoun

A cap on how many attempts are allowed in a time window, to stop guessing and floods.

At VSIMAttempts are counted with SHA-256 fingerprints kept for 24 hours.

Retention periodnoun

How long a piece of data is kept before it is deleted.

At VSIMFrom 1 hour (reset links) to the life of your account.

Session cookienoun

A small file the browser keeps only until it closes.

At VSIMvsim2_sid keeps you signed in.

Third-party trackernoun

A script or pixel from another company that records what you do, usually for analytics or ads.

At VSIMVSIM loads none.

Fine print

What else does this policy cover?

18+

Adults only

VSIM is for people aged 18 or older. If we learn an account belongs to a minor, we close it and delete its personal data.

Why we use your data

  • To deliver the numbers and codes you order
  • To keep accounts safe and stop fraud and abuse
  • To answer your tickets
  • To keep accounting records that add up

Never for advertising, profiling or sale.

What this covers

vsim.co and your VSIM account. The payment pages of Heleket and NOWPayments, and Telegram chats, follow their own privacy policies.

Change log

  1. v1.0Policy for the rebuilt VSIM: one cookie, no trackers, 24-hour SMS text deletion, data listed field by field.

Every change gets a new version and date at the top of this page. Big changes are also announced on the site.

Related rules

The Terms of Service cover accounts, misuse and appeals. The Refund Policy covers your balance.

Questions

What do people ask about their data?

14 straight answers, in the words we would use in a ticket.

Showing all 14

Basics

Does VSIM sell my data?

No. VSIM does not sell, rent or trade personal data, and it shows no advertising.

Basics

What personal data does VSIM collect?

Your email, an optional name, a hashed password, your sign-up and last sign-in IP addresses, the page and site that brought you, your balance history, top-ups, orders, permanent number logins, tickets and fault reports.

Basics

Does VSIM use cookies or trackers?

One cookie: the session cookie vsim2_sid, which ends when you close the browser. VSIM loads no analytics, advertising or social media scripts. Your theme choice is kept in your own browser's storage.

Basics

Does VSIM send marketing emails?

No. The only email VSIM sends is the password reset link you ask for.

Who else receives my data?

Our number suppliers receive only order details, never your email or IP. Heleket receives the amount and order ID; NOWPayments also receives your email for its receipt, and Formspree receives your email and message if you use the contact form. Our hosting provider stores the data for us.

Does the number supplier know who I am?

No. Our server orders the number with only the app, country, carrier and a price cap. Your email, IP address and account never reach the supplier.

Can VSIM read the SMS sent to my number?

Yes, for the numbers on your orders, because showing that SMS to you is the service. The full text is deleted 24 hours after the order closes; the code stays in your order history.

Retention

How long does VSIM keep my data?

Account, order and payment records stay until you ask us to delete the account. The full SMS text is deleted 24 hours after an order closes, reset links expire after 1 hour, and rate-limit fingerprints are deleted after 24 hours.

Retention

Is my data deleted if I stop using VSIM?

No. Nothing about your account expires by itself, so your balance and order history stay available. Ask by ticket if you want the account deleted.

Your control

How do I get a copy of my data?

Open a ticket from your account and ask for a copy. We reply in the same ticket.

Your control

How do I delete my VSIM account?

Open a ticket from your account and ask for deletion. We remove your email, name, IP addresses, tickets, fault reports and permanent number logins, and keep order and top-up records without your email.

Your control

What happens to my balance if I delete my account?

It is lost. VSIM balance cannot be withdrawn, so spend it before you ask for deletion.

Security

Can VSIM staff see my password?

No. Only a bcrypt hash of your password is stored, and a hash cannot be turned back into the password.

Security

Can children use VSIM?

No. VSIM is for people aged 18 or older, and we close accounts that belong to minors and delete their personal data.

Still have a question about your data?

Write to @vsim_support on Telegram or open a ticket from your account. A person answers between 08:00 and 24:00 Tehran time (UTC+3:30).

Open a ticket Message @vsim_support