This Privacy Policy explains how GSCF ("we", "us", "our") collects, uses, stores and protects information about users ("you") of the GSCF SMS Gateway service at sms.gscf.online.
Account information: When you create an account, we collect your chosen username and a hashed version of your PIN. We never store your raw PIN.
Device information: When you pair an Android device, we collect device name, model, Android version, SIM count and signal information provided by the GSCF SMS app. We do not access your contacts, messages or any other device data beyond what is necessary to operate the gateway.
Campaign data: Phone numbers and message content you upload for campaigns are stored in your private account database and are not shared with other users or third parties. You are solely responsible for the lawfulness of the phone number lists and message content you use.
Session data: We store temporary session tokens in memory (not on disk) to keep you logged in. These expire after 7 days or on logout.
Inquiry data: If you submit an eSIM order request, we record your gateway username and chosen plan.
We do not sell, rent or share your personal data with third parties for marketing purposes.
Order notifications are sent to our internal team communication system. No customer personal data beyond your username and chosen plan is transmitted externally.
We may disclose data if required by law or to protect the rights and safety of our users.
Account data is retained until you request deletion. Campaign data (phone number lists, messages, logs) is stored for the lifetime of your account and deleted when your account is deleted. Session tokens expire after 7 days.
PINs are hashed using PBKDF2 with SHA-256 and a per-user random salt — they are never stored in plaintext. All data is transmitted over HTTPS/WSS. We do not store payment information — all payments are processed in cryptocurrency and are non-reversible by nature.
If you are located in the European Economic Area, you have the right to:
To exercise any of these rights, contact us via email at admin@baceflip.com or on Telegram: @GSCFmanagerbot.
GSCF SMS Gateway does not use tracking cookies. Session authentication uses localStorage in your browser, not cookies. If we add analytics in future, this policy will be updated.
This service is not directed to individuals under the age of 18. We do not knowingly collect data from minors.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance.
For privacy-related questions or data deletion requests, contact us via Telegram: @GSCFmanagerbot