PhoneLookup
Legal

Privacy Policy

Last updated: May 21, 2026

PhoneLookup ("we", "us", "our") operates phonelookup.in, a community-powered phone number intelligence service. This Privacy Policy explains what we collect when you use the site, why we collect it, how it is stored, and the rights you have over your data. We aim to comply with India's Digital Personal Data Protection Act, 2023 (DPDP), the EU GDPR and the UK GDPR where applicable.

1. Who we are

PhoneLookup is an independent online service. We do not sell phone numbers, do not run outbound campaigns, and we are not affiliated with any telecom carrier, government body or law-enforcement agency.

2. What we collect

  • Searched phone numbers. When you look up a number, we store the number in standardized E.164 format together with an aggregate search counter and a "last searched" timestamp.
  • Community reports and comments. Tags (Spam, Fraud, Safe, etc.), short comments and the category you pick. Reports are anonymous by default — we do not ask for your name, email or phone number.
  • Technical logs. Standard server logs (IP address, user agent, referrer, request path, timestamp). Kept for up to 30 days for abuse prevention and debugging.
  • Analytics. Aggregate, pseudonymous usage metrics via Google Analytics 4 and Microsoft Clarity (page views, session replays of UI interactions — with input masking enabled).
  • Contact submissions. If you email us or use the Contact page, we receive the message and the email you send it from.

3. What we don't collect

  • We do not run accounts, so we don't store passwords, addresses or payment details.
  • We do not record audio, do not place calls, and have no access to your call logs.
  • We do not knowingly collect data from children under 18.

4. Why we use it

  • To compute and display a community reputation for each number.
  • To rank trending and most-reported numbers and category pages.
  • To detect and block abuse (rate-limit spammy reporting, fake votes, scraping).
  • To improve the product based on aggregate usage patterns.

5. Lawful basis (GDPR / DPDP)

Our lawful bases are (a) your consent — when you voluntarily submit a report or comment, (b) our legitimate interest — in running a safe community service and protecting users from phone-based fraud, and (c) compliance with law — where we are required to retain or disclose specific records.

6. Cookies and similar technologies

We use a small number of cookies and similar identifiers:

  • Essential — to keep your session and remember theme preference.
  • Analytics — Google Analytics (_ga, _gid) and Microsoft Clarity identifiers, used in an aggregate, pseudonymous way.

You can clear or block cookies in your browser settings. Doing so will not affect your ability to search phone numbers.

7. Sharing & third parties

We share data only with infrastructure and analytics providers acting as processors:

  • Hosting and database — Supabase / Cloudflare.
  • Analytics — Google Analytics, Microsoft Clarity.
  • Search Console — Google Search Console (verification and indexing data).

We do not sell personal data, do not run ad networks on the site, and do not share reports with telemarketers.

8. Data retention

  • Searched numbers and aggregate counters: retained as long as the service runs.
  • Community reports and comments: retained until you request removal (see §10).
  • Raw server logs: up to 30 days.
  • Contact emails: up to 24 months.

9. Security

All traffic is encrypted in transit (HTTPS / TLS). The database enforces row-level security and least-privilege access. No system is perfectly secure — if you suspect a breach, please contact us immediately at privacy@phonelookup.in.

10. Your rights — including content removal

You have the right to access, correct or delete personal data we hold about you, and to object to processing. If you find a number, comment or report that identifies you and you want it removed, email privacy@phonelookup.in with the URL and a short reason. We respond to removal requests within 7 working days.

11. International transfers

Our infrastructure may process data in India, the EU and the United States. Where we transfer personal data outside your country, we rely on standard contractual clauses or equivalent safeguards.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date at the top of the page. Continued use of PhoneLookup after an update constitutes acceptance of the revised policy.

13. Contact

Questions about this policy or our data practices? Reach us at privacy@phonelookup.in or via our Contact page.