Privacy Policy

Last updated October 6, 2026

Information we collect

When you request an account, we collect your first and last name, email address, visa category, a password verifier, and—if you provide it—your phone number and SMS preference. We also save whether you opted in to future email alerts. Email verification codes are short-lived. We store names, email addresses, and phone numbers encrypted in the account database; email and phone lookup values are hashed. Passwords are never stored as plain text. The browser derives a salted PBKDF2-SHA-256 verifier before sending signup data.

If you choose to share a calendar report, we store the city, visa category, earliest date, available-date count when supplied, capture time, consent version, and a hashed extension installation identifier. We do not collect portal passwords, passport or application details, page text, or screenshots. Reports are removed after 30 days.

How we use information

Account information supports signup, email verification, and account access. Email and SMS alert preferences are recorded with their consent time; SMS alerts are not available yet and we do not send SMS messages. Community reports help show recent user-submitted availability. Account sessions expire after 24 hours. Password changes revoke other sessions. The browser stores a session token in the current tab’s session storage; the server stores a hash of that token. Login challenges expire after five minutes.

Service providers and security

Cloudflare hosts the API and database. Resend processes email delivery when configured. These providers process data to operate the service. We use encrypted transport, database encryption for direct identifiers, and restricted access; no online service can promise absolute security.

Retention and your choices

Reports are retained for up to 30 days. Signup codes expire after 10 minutes and failed or expired pending signups are removed. Verified account details are kept until you request account deletion. You may request deletion or ask a privacy question at alerts@slotsignal.com. Product update emails include an unsubscribe option.

Children and changes

visaslotinfo is not intended for children under 13. We may update this policy as the service develops; the date above shows the latest revision.

Return to visaslotinfo · Terms of Use

Extension access codes are stored as hashes on our server, linked to your account, visa category and city. Codes expire after 30 days; issuing a new code revokes the previous code. The extension saves your code and terms acceptance locally until you remove it. Availability is fetched when you activate access or refresh community data; your access code is not injected into the visa portal.

Optional automatic capture runs on the OFC scheduling page only after you opt in within the extension. It observes visible enabled calendar dates and the selected city. It sends the first date, distinct date count, your selected visa category and a random installation ID. It does not read credentials, applications, or other page content, click calendar controls, refresh the portal, or book appointments. Disconnecting your code stops capture.