Privacy Policy

Effective 21 September 2026. What GSX.info collects, why, who sees it, how long it is kept, and what you can ask us to do with it.

1. Who this policy covers

This policy explains what personal data GSX.info collects when you visit gsx.info, run a free check, open an account, place orders or call our APIs, why we collect it, how long we keep it and what rights you have. GSX.info is the data controller for that data.

We keep this short and specific. Where we say "we collect" something, the platform actually stores it; where we do not mention something, we do not collect it.

2. What we collect, and why

Account data: the name of your business or website, your email address, your username and a hashed password (we never store the password itself). If you sign in with Google, GitHub or Apple, we receive the email address and the provider's identifier for you. Why: to run your account, sign you in, and send you the emails described below.

Order data: for each order, the service, the price, the time, the device identifier you submitted (IMEI, serial number or similar), any extra field the service requires, and the result returned. Why: to perform the service you asked for, to show your history, to handle refunds and to keep the accounts the law requires. A device identifier on its own does not identify a person, but we treat it with the same care as personal data.

Payment data: the amount, currency, method, invoice number and, for cryptocurrency, the network, the address we gave you and the transaction reference. We never receive or store card numbers; card payments, where offered, are handled by the processor named at checkout. Why: to credit your balance and keep records of payments.

Technical data: your IP address, browser user-agent, the time of requests, and for API calls the key used. Why: security, fraud prevention, rate limiting, and the daily allowance on free checks, which is counted per address.

Free checks: the identifier you typed, the result, your IP address and the time. Why: to give you the result, to enforce the daily allowance, and to serve a repeated question from the cached result. Free checks are also protected by Cloudflare Turnstile, which may set a cookie and process your IP address under Cloudflare's own policy.

Notifications: if you connect Telegram, your Telegram chat identifier; if you turn on email or Telegram notifications, the record of what we sent. Why: to deliver the notifications you asked for.

Support: what you write to us in tickets or email. Why: to answer you.

3. Legal bases

Performing our contract with you (account, orders, payments, notifications, support); our legitimate interests in keeping the platform secure, preventing fraud and abuse, and enforcing our terms (technical data, free-check limits, order records); and legal obligations (accounting and tax records, responding to lawful requests). Where we rely on consent — for example optional notifications — you can withdraw it at any time in your profile.

4. Who we share data with

Sources: to perform a check or unlock we send the device identifier and any required field to the third-party source that provides that service. We send nothing else about you. The source's own policy governs its handling of the identifier.

Service providers: Cloudflare (network security and Turnstile), our hosting provider, our email delivery provider, the payment processor shown at checkout, and Telegram (if you connect it). Each receives only what it needs to do its job.

Authorities: where the law requires, or where we reasonably believe it is necessary to prevent fraud, protect the rights or safety of a person, or enforce our terms.

We do not sell personal data, and we do not share it with advertisers.

5. Cookies

We set one session cookie to keep you signed in and, in your browser's local storage, a few preferences such as a remembered filter. Cloudflare may set its own security cookies. We do not use advertising or tracking cookies, and we do not use third-party analytics.

6. How long we keep data

Account data: for as long as the account exists, and for up to seven years after closure where accounting or tax law requires records of payments and orders.

Order data and results: for as long as the account exists, so your history and refunds work, and then as accounting law requires.

Free-check records: the identifier, result and IP address are kept for the cache window (currently three days) and for up to ninety days for abuse prevention, then deleted or anonymised.

Technical logs: up to ninety days.

Support messages: for as long as the account exists, or two years for a visitor.

7. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable form, and to complain to a supervisory authority. To exercise a right, write to us through the Contact page from the email address on your account. We answer within thirty days. We may keep what the law requires us to keep even after a deletion request, and we will tell you if so.

You can update your details, change your password, rotate API keys and turn notifications on or off in your profile at any time.

8. Security

Passwords are hashed; API keys are stored as hashes and sealed copies; traffic is encrypted in transit; the platform sits behind Cloudflare; access to the server is limited to the operators. No system is perfectly secure, and you are responsible for keeping your own credentials secret. If we become aware of a breach affecting your data we will notify you as the law requires.

9. International transfers

Our servers and providers may be in countries other than yours. Where data leaves the European Economic Area or the United Kingdom we rely on the safeguards the law provides, such as standard contractual clauses.

10. Children

The platform is for adults and businesses. We do not knowingly collect data from anyone under 18. If you believe a minor has opened an account, tell us and we will close it.

11. Changes and contact

We may update this policy; the effective date at the top changes when we do, and material changes are notified to account holders. Questions or requests: the Contact page, or the email address in the footer of every page.

See also the Terms of Service.