Privacy Policy
Last updated: October 26, 2026. Operator: 3443 Enterprises LLC (d/b/a LegitPhone) · support@legitphone.com
What we collect
- The phone's IMEI, entered by you or the seller.
- Check results returned by our data provider (for example model, storage, color, serial number, warranty dates, lock and blacklist status) and the time of the check.
- Your email: you enter it on Stripe's payment page, and Stripe uses it for your payment receipt. For checks where you send the seller a link, we also keep it so we can email you the report link when the seller finishes. We delete it right after that email (or when the check ends without a report).
- Payment records: Stripe processes your payment. We store only a Stripe reference ID, never your card details.
- Pack codes: if you buy a 10-check pack, we store the code, how many credits are left, and the Stripe reference. Free trial codes we give to shops work the same way. No name or account.
- Cookies: we use two first-party cookies and no third-party analytics or ad trackers. One remembers your language. If you arrive through a link with a referral tag (for example
?ref=partner-name), a second cookie (lp_ref) remembers that tag for 30 days so we can see which links lead to purchases. The tag is saved with your check or pack purchase and sent to Stripe as payment metadata. It doesn't identify you. - Visit counts: we count page views per day, by page and referral tag (for example "12 views of /pack from ?ref=shop-name"). These are totals only. We don't store your IP address, device details or any ID with them, and no cookie is set for this.
- Basic technical data: your IP address is used briefly to limit abuse (rate limiting), along with standard hosting logs.
We don't ask sellers for any personal information. No account is needed for buyers or sellers.
How we use it
We use this data to run the check you paid for, show you the report, email you the report link for seller-link checks, prevent abuse and duplicate charges, handle refunds, and meet legal obligations. We don't sell personal data or use it for advertising.
Who processes it
- Stripe: payments.
- Our IMEI data provider: receives the IMEI to run the check.
- Our email delivery provider: sends the report-ready email for seller-link checks.
- Netlify and Turso: host the site and store check data in the United States.
Report links
Report and status links use long random IDs that can't be guessed. Anyone who has a report link can view that report, so share it only with people you trust. Your private status page is separate from the seller's link.
How long we keep it
Reports, check requests and results are deleted automatically after 90 days. Unpaid, abandoned checks are deleted after 2 days, and cached lookup results after 1 day. Pack codes are kept until they expire, 12 months after purchase, so the credits keep working. We keep a sales tally (date, amount, referral tag, no personal data) for our accounts. Payment records kept by Stripe follow Stripe's own retention rules.
Your choices and rights
You can ask us to delete a report early, or ask what data we hold about a check. Send the report link to 3443 Enterprises LLC (d/b/a LegitPhone) · support@legitphone.com. Depending on where you live (for example California or the EU/UK), you may have more rights; we will honor them as required by law.
Security
Data is sent over HTTPS, and access to our systems is restricted. No system is perfectly secure.
Children
LegitPhone is not directed to children under 13 and doesn't knowingly collect their data.
Contact
3443 Enterprises LLC (d/b/a LegitPhone) · support@legitphone.com