Information processed
We process phone numbers submitted for lookup, community reports and comments, removal-request contact information, and limited technical data needed for security and rate limiting.
Abuse prevention
Raw IP addresses are not intended to be retained indefinitely. A server-side secret is used to create non-reversible HMAC identifiers for rate limits, duplicate detection, and abuse investigation. User-agent values are also hashed before storage.
Provider lookups
A normalized phone number may be sent to the configured telecom lookup provider. Provider results may be cached to improve speed and control cost. Raw provider payloads are not sent to the browser.
Community submissions
Reports may be public, while optional comments enter moderation. Do not submit private addresses, financial information, Social Security numbers, email dumps, threats, or harassment.
Analytics and advertising
Analytics is disabled unless configured. Raw phone numbers and personally identifying lookup data must never be included in analytics events. Advertising slots render only when an ad provider is configured.
Removal and suppression
Requests are private and may require verification. Approved suppression overrides later caller-name enrichment. Contact privacy@whothehelljustcalledme.com.
Retention and rights
Retention schedules, applicable state privacy rights, and international transfer language must be finalized with counsel for the actual production vendors and jurisdictions.