Privacy Policy
Information we collect
iUnlockMobile processes the information you provide when creating an account, signing in, placing a guest or account order, contacting support, or funding an account. This may include your username, email address, password hash, device identifiers such as IMEI numbers, order details, payment references, account balances, and support communications.
If you choose Continue with Google, Google provides a stable account identifier, your email address, and basic profile information covered by the permissions shown on Google's consent screen. We do not request access to Gmail, Google Drive, contacts, calendars, or offline access, and we do not store Google access or refresh tokens.
How we use information
We use account and order information to authenticate users, process and track service requests, manage credits and payments, deliver status updates, prevent abuse, investigate security events, provide support, and maintain legally required transaction records. We do not sell personal information.
Cookies and optional measurement
Free format and Luhn checksum validation runs locally in your browser and does not send the IMEI to a device-data provider. Paid checks and unlock services start only after order confirmation and verified payment. Guest checkout uses your IMEI and delivery email; an account is required for card orders with a service price below $1 so the remaining amount can be saved as account credit.
Optional analytics and advertising storage are denied by default. You can allow or reject them using Privacy choices on any page. With consent, we save validated Google click identifiers (gclid, gbraid and wbraid) in signed, HttpOnly cookies for up to 90 days and snapshot them on accepted website orders for attribution. Rejection clears these cookies and disables optional funnel events. Existing transaction records remain subject to the retention policy below.
With optional analytics consent, signed-in customer activity is linked using a random analytics User-ID. We record page categories, visit times and estimated active time to understand service demand and improve the customer experience. The same random ID is sent to Google Analytics 4 so activity can be understood across signed-in sessions. We do not use IP addresses to identify customers for this feature or send names, email addresses, IMEIs, wallet details or private URL parameters to Google Analytics.
Active time counts focused, visible pages and pauses after 60 seconds without interaction, with a one-hour maximum per page visit. Detailed page activity stored by iUnlockMobile is available for up to 90 days and older records are regularly removed. The random analytics ID remains linked to your account while needed for this measurement or until an eligible deletion request is processed. Administrators do not appear in customer behavior tracking. You can stop future optional tracking at any time using Privacy choices; previous records remain subject to these retention and deletion rules.
Google Analytics also receives sanitized campaign labels and external referrer origins to help us understand which marketing channels bring visitors. We exclude free-text search terms, arbitrary URL parameters and private account paths. With consent, payment-event markers in your browser are used for up to 90 days to reduce repeated counts. GA4 user and event data retention is configured to 14 months, with user retention restarting when new activity is recorded. This is separate from the 90-day limit for detailed page activity stored by iUnlockMobile.
Funnel events contain only allowlisted service categories, statuses, currency and amounts. We do not include raw IMEI numbers, emails, names, wallet addresses, transaction hashes, CSRF tokens, account names or provider order identifiers. Google advertising purchase conversions are limited to delivered services with a matching charge; adding account credit or submitting an order is not a purchase conversion. Google may process consent-mode signals under its own privacy terms.
The website uses secure, HttpOnly cookies to maintain signed-in sessions and short-lived OAuth transactions. Passwords are stored as salted hashes. Access controls, rate limits, encrypted transport, database backups, and audit records are used to protect the service, but no system can guarantee absolute security.
Service providers and retention
We may share only the information needed to operate the service with infrastructure, email, authentication, payment, and device-service providers. Google authentication is governed by Google's own privacy terms. Records are retained only as long as needed for service delivery, security, dispute handling, accounting, or legal obligations, after which they are deleted or de-identified where practical.
Your choices
You may use password authentication instead of Google, revoke iUnlockMobile access from your Google Account, and request access, correction, or deletion of eligible account information. Some transaction records may need to be retained for fraud prevention, accounting, or legal compliance.
Contact
For privacy questions or account requests, email support@iunlockmobile.com.