Privacy Policy

Last updated: April 12, 2026

1. Introduction

WhoCalledMe.io (“we”, “us”, or “our”) operates the website whocalledme.io. This Privacy Policy explains how we collect, use, and protect your information when you use our reverse phone lookup service. We are based in the Netherlands and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

Information you provide:

  • Phone number reports and comments you submit
  • Your name (optional, when submitting reports)

Information collected automatically:

  • IP address (stored for rate limiting and spam prevention, deleted after 90 days)
  • Browser type and version
  • Pages visited and time spent
  • Referring website

3. Legal Basis for Processing (GDPR)

We process your data based on the following legal grounds:

  • Consent – For analytics cookies and advertising (collected via our cookie consent banner)
  • Legitimate interest – For operating our service, preventing abuse, and improving user experience
  • Legal obligation – For complying with law enforcement requests when required

4. How We Use Your Information

  • To provide and maintain our phone lookup service
  • To display user reports about phone numbers
  • To prevent spam and abuse of our reporting system
  • To analyze usage patterns and improve our service (only with consent)
  • To display relevant advertisements when applicable (only with consent)

5. Cookies

We use the following types of cookies:

  • Essential cookies – Required for site functionality (e.g., cookie consent preference). Duration: 1 year. Cannot be disabled.
  • Analytics cookies – Google Analytics (GA4) to understand traffic patterns. Duration: 2 years. Only loaded after consent.
  • Advertising cookies – Google AdSense for displaying relevant ads. Duration: varies. Only loaded after consent.

Cookie consent: On your first visit, we show a consent banner. You can accept or reject non-essential cookies. Your preference is stored for 365 days. You can change your preference at any time by clearing your browser cookies and revisiting the site.

Withdrawing consent: To withdraw consent for analytics and advertising cookies, clear your browser cookies for whocalledme.io. On your next visit, you will be asked again.

6. Third-Party Services

We use the following third-party services, which may process your data:

  • Google Analytics (GA4) – For website traffic analysis. We use IP anonymization. Data may be transferred to Google servers in the US. Google Privacy Policy
  • Google AdSense – For displaying advertisements. Google may use cookies to serve ads based on your browsing history. You can opt out of personalized ads at Google Ad Settings. Google Ad Policy
  • Hostinger – Our hosting provider, based in the EU. Hostinger Privacy Policy
  • flagcdn.com – For serving country flag images. No personal data is shared.
  • OpenStreetMap – For displaying location maps. Map tiles are loaded from OpenStreetMap servers. OSM Privacy Policy

7. International Data Transfers

Some of our third-party services (Google Analytics, Google AdSense) may transfer data to the United States. These transfers are protected by Google’s compliance with applicable data protection frameworks. By accepting analytics/advertising cookies, you consent to this transfer.

8. Data Retention

  • Phone number reports: Retained indefinitely to maintain the usefulness of our service
  • IP addresses: Stored for a maximum of 90 days for rate limiting purposes
  • Cookie consent preference: Stored for 365 days
  • Analytics data: Retained according to Google Analytics default settings (14 months)

You may request deletion of your submitted reports at any time by contacting us.

9. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access – Request a copy of your personal data
  • Rectification – Request correction of inaccurate data
  • Erasure – Request deletion of your data (“right to be forgotten”)
  • Restriction – Request restriction of processing
  • Objection – Object to processing based on legitimate interest
  • Data portability – Receive your data in a structured format
  • Withdraw consent – Withdraw cookie consent at any time

To exercise any of these rights, contact us at info@whocalledme.io. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), access controls, rate limiting, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

11. Children

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We recommend reviewing this policy periodically.

13. Contact

For privacy-related questions or to exercise your data rights:

Email: info@whocalledme.io
Response time: within 30 days for GDPR requests, within 48 hours for general inquiries.