Privacy

Effective 7 September 2026.

This page states what numbered.me records about you, why, and what you can do about it.

What is recorded

When you sign in, the registry stores:

• the name of the identity provider you used (GitHub or Google);
• that provider's stable account identifier for you (GitHub's numeric user id, or the sub claim from Google);
• your GitHub login, if you used GitHub. It is hidden unless you choose to show it on your record;
• a display name, only if you type one in;
• the time of registration and, if it happens, the time and reason of revocation.

Your email address is not requested and is not stored. From Google we request the openid and profile scopes, read the sub claim from the ID token, and discard the rest. Your name and picture from either provider are not kept.

Before sign-in, Cloudflare Turnstile evaluates your browser. numbered.me receives only Turnstile's pass or fail verdict, together with your IP address, which is used for rate limiting and not stored.

Why

To issue your number, to display it, to make sure one account receives one number, and to let you sign back in. Nothing is used for advertising, profiling, or sale.

Cookies

• nm_session: keeps you signed in for one year.
• turnstile_ok: records a passed Turnstile check for five minutes.
• nm_oauth: protects the sign-in handshake for ten minutes.
• nm_flash and nm_new: carry a one-time message for a few minutes.

All are HttpOnly and used for nothing else. There are no advertising or third-party cookies. Cloudflare Web Analytics runs on the site; it does not use cookies or identify visitors.

Who else sees data

The site runs on Cloudflare, which hosts the application, the database, and Turnstile. GitHub or Google see that you signed in to numbered.me, under their own policies. No one else receives your data.

What is public

Your number, registration time, verification level, display name (if set), GitHub login (if you chose to show it), and revocation status (if revoked) are public on your record, in the badge, in the share card, and through the API. Provider identifiers are never published.

Retention and deletion

Records are kept until you ask for deletion. On request, your record is deleted; your number is retired and is never issued to anyone else. Revoked records stay listed as revoked. To request deletion or a copy of your record, contact the operator below and sign the request from the account you registered with.

Changes

Changes are made on this page with a new effective date.

numbered.me is operated by Serhii Korniienko. Contact: github.com/SerhiiKorniienko.