Privacy and data

Do you log IP addresses?

Answer

Not persistently. Every web server sees an IP by necessity; HushSMS holds them in memory for rate-limiting and rotates them hourly without ever writing them to disk. There is no historical IP log to search, subpoena or leak.

The longer version

The reason any IP is processed at all is abuse: without rate-limiting, an open checkout is a free stress-testing target and a free credential-stuffing target. That need is satisfied by knowing what an address did in the last few minutes, and nothing about it requires a permanent record. Keeping one is simply the default in most stacks, which is how so many companies end up disclosing logs they had no business reason to hold. Worth being precise about the boundary: this covers what we store, not what your network path observes, and if the origin IP matters to your threat model then a VPN or Tor is the layer that addresses it, not us.