Datenschutzerklärung

This Privacy Policy explains how DeviceDecoded ("we", "us", "our") collects, uses, and protects your personal information when you use our website and services. By using DeviceDecoded, you agree to this policy.

Information we collect

• Information you provide: device identifiers you enter (IMEI, serial number, MAC address), and — when you place an order — your name and email address.
• Payment information: card payments are processed by our payment provider, Stripe. We do not store full card numbers; we retain only non-sensitive details such as card brand, the last four digits, and Stripe identifiers needed to manage your order.
• Information collected automatically: IP address, device and browser type, approximate location (from IP), the pages you visit, and how you interact with them. Some of this is collected via cookies and analytics tools (see below and our Cookie Policy).
• Device-action records: when you attempt a sensitive action in the PhoneToolbox app — such as erasing a phone or removing a carrier, activation or account lock — we record the device identifier (IMEI or serial), your confirmation that the device is yours, and any lost, stolen or blacklist signal from an earlier check. See "Device-action records" below.

How we use your information

• To provide our checks and unlock services and process your orders;
• To take payment and issue receipts, refunds, or credit notes;
• To send you service and order-status emails;
• To prevent fraud and misuse (including verifying device ownership);
• To understand and improve how the site and checkout perform (analytics and session replay — only with your consent);
• To comply with legal and accounting obligations.

Legal bases (UK & EU GDPR)

We process your data to perform our contract with you, for our legitimate interests (running and improving our service, preventing fraud), to comply with legal obligations, and — for non-essential analytics cookies — on the basis of your consent.

Analytics and session replay

With your consent, we use PostHog (hosted in the EU) and Google Analytics to measure how the site is used, including session replay that helps us see where the checkout can be improved. Replays mask the contents of form fields, and your card details are entered inside our payment provider's secure frame and are never recorded by us. You can decline these cookies at any time via the cookie banner.

Device-action records (PhoneToolbox app)

When you use the PhoneToolbox desktop app to run a sensitive action that changes a device — erasing it, or removing a carrier, activation or account lock — we record that the attempt was made, including where it was declined. This record includes the device identifier (IMEI or serial), the make and model, the confirmation you give that you own the device or are authorised to modify it, and whether an earlier check flagged the device as lost, stolen or blacklisted. Unlike our analytics, these records are kept whether or not you have consented to analytics, because they serve a different purpose: to stop our tools being used on devices that are not the user's, to answer requests from payment providers and law enforcement, and to establish or defend legal claims.

Our legal basis is our legitimate interest in preventing fraud and misuse and in protecting our business and other people, and — where the action forms part of an order — the performance of our contract with you. We keep these records for up to 24 months, after which they are deleted or anonymised. If a device has been flagged as lost or stolen, we may decline to complete the action and ask you for proof of ownership.

Who we share data with

We share data only with service providers who process it on our behalf, including: Stripe (payments), PostHog and Google (analytics), our email provider, our hosting and infrastructure providers, and unlock-fulfilment partners required to complete your order. We may disclose information where required by law. We do not sell your personal data.

International transfers

Some providers may process data outside your country. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses.

How long we keep data

We keep personal data for as long as needed to provide the service and to meet legal, tax, and accounting requirements. Order and transaction records are typically retained for several years as required by law. Device-action records from the PhoneToolbox app are kept for up to 24 months for fraud-prevention and legal reasons, then deleted or anonymised.

Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your data, to object to processing, to data portability, and to withdraw consent. You can also complain to your data protection authority (in the UK, the ICO). To exercise any right, email us at the address below.

Children

Our services are not directed at children and are not intended for anyone under 16.

Changes

We may update this policy from time to time. The "last updated" date above reflects the latest version.

Contact

Questions or requests about your data: [email protected].