Privacy Policy
Intermob Limited · trading as TonMobile
Version 1.0 · Effective date: October 4, 2026
Background
Intermob Limited understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all our clients, customers, and partners, and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.
Definitions
Platform means all channels through which the Services are made available, including the Telegram bot @tonmobile available at https://t.me/tonmobile (also available as @mobile at https://t.me/mobile), the web application at https://web.tonmobile.com/, and the TonMobile eSIM mobile applications for iOS and Android.
1. Information About Us
1.1 Intermob Limited, trading under the brand name TonMobile, is a limited company, registration number 79904463, with a registered office address at 8F, 30 Hollywood Road, Central, Hong Kong. Intermob Limited is the controller responsible for the processing of your personal data described in this Privacy Policy. Intermob Limited acquired the TonMobile service from Tonave Services Limited (Cyprus) on 23 September 2026 and has been the controller of personal data processed in connection with the service since that date.
1.2 We ARE NOT a mobile provider or mobile network operator. Data services are provided by their respective network providers in their country. Although we are not the network provider, we will provide support to end-users who purchase services we resell.
1.3 WE DO NOT ASSUME ANY RESPONSIBILITY AND MAY NOT BE HELD RESPONSIBLE OR LIABLE FOR CONNECTIVITY AS SUCH, ITS QUALITY, QUANTITY, DIVERSITY, COVERAGE, SECURITY, OR ANY OTHER FEATURE OR OPTION A CONSUMER MAY EXPECT FROM A MOBILE OPERATOR OR PROVIDER.
1.4 We provide our services via the Platform. All channels are equally available. If you disagree with our Privacy Policy, Terms and Conditions, or any other policy, please do not use our services.
1.5 Contact details:
- Email: info@tonmobile.com
2. What Does This Notice Cover?
This Privacy Policy explains how we collect, process, and use your personal data through our Platform and in the course of providing our services.
It also covers how we use personal data for analytics and marketing, advertising purposes, including behavioral data used for marketing through third-party advertising and analytics platforms.
Finally, it explains your rights under the law relating to your personal data.
3. What Is Personal Data?
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the "GDPR") as 'any information relating to an identified or identifiable person who can be directly or indirectly identified in particular by reference to an identifier'. For individuals in Hong Kong, 'personal data' also has a meaning given to this term in the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"), which governs the collection, use, and handling of personal data in Hong Kong. Together, these instruments (and any other applicable data protection laws) are referred to in this Policy as the "Data Protection Legislation".
Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
4. What Personal Data Do You Collect and How?
We may collect and hold some or all of the following personal data:
- Email address: collected directly from you.
- Business information: business name, business address, contact details, collected directly from you via email.
- Payment information: payment transactions are processed securely by third-party payment processors. We do not directly collect or store card details, account numbers, or bank information. We may receive transaction confirmation data such as payment status and amount.
- Public profile information: Telegram username, display name, and profile picture(s), automatically received via the Telegram Bot API when you interact with our bot. This information is limited to data you have chosen to make publicly available in your Telegram account settings. We do not have access to the data that is chosen as private in your Telegram account. Please note that Telegram processes your data independently in accordance with its own Privacy Policy available at https://telegram.org/privacy.
- Cookies and similar technologies: IP addresses and general geolocation, browser type and version, device type and operating system, referring URL and website navigation patterns, session timestamps and activity logs. This data may be collected by first-party cookies (set by us) or third-party cookies and services (as further described in Parts 11 and 12).
5. How Do You Use My Personal Data?
We may use your personal data for the following purposes:
- Administering our business;
- Supplying our services and support to you;
- Managing payments for our services;
- Personalising and tailoring our services for you;
- Communicating with you and supplying you with information on our services;
- Delivering relevant advertising and measuring its effectiveness, including via third-party platforms such as Google Ads;
- Measuring the performance of our mobile app marketing campaigns and attributing app installs and purchases to advertising and partner channels;
- A/B testing and improving the Platform interface.
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email with information, news, and offers on our services. You will not be sent any unlawful marketing or spam. You may opt-out of marketing emails at any time by clicking the unsubscribe link included in every marketing email.
We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose.
In some circumstances, where permitted or required by law, we may process your personal data without your consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.
We also use third-party analytics and advertising technologies (see Section 11) to help us understand how users interact with our Platform, optimize and improve our services and advertising, marketing efforts, and deliver targeted advertisements. This includes the use of tracking technologies such as cookies and pixels. Where required by the Data Protection Laws, we obtain your consent before enabling these technologies. Non-essential cookies and tracking technologies are activated only after you give consent through the cookie banner; simply closing the banner does not activate them.
We may also invite you by email to leave feedback on our services via the Trustpilot review platform after a purchase.
6. How Long Will You Keep My Personal Data?
We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including to comply with legal, accounting, or reporting obligations. The following retention periods apply to the categories of personal data we collect:
- Account data (email address, Telegram username and profile information): 7 years from the date of last account activity.
- Payment data (transaction confirmation data, payment status and amount): 7 years, in accordance with applicable accounting and tax obligations.
- Customer support data (correspondence and communications): 7 years, in accordance with applicable limitation periods for legal claims.
- Cookies and analytics data: for the lifetime of the individual cookie, up to 24 months (individual durations are listed in the cookie tables in Part 12). Your consent decision (tm_consent) and consent log records (Part 12.3) are retained for as long as necessary to demonstrate compliance. Analytics data already collected on the basis of your consent is retained in our analytics systems, linked to your user identifier, until you request its erasure as described in Part 9; the collection of new data stops as soon as you withdraw your consent (Part 12.3).
- Marketing data: until you withdraw your consent or unsubscribe, plus 3 years thereafter.
Once your data is no longer required, we will securely delete or anonymize it.
7. How and Where Do You Store or Transfer My Personal Data?
We store your personal data electronically within the European Union (EU). Specifically, your account and transactional data is stored on servers located in Germany, and analytics data is stored on servers located in the Netherlands. Both locations are within the EU and subject to the protections of GDPR.
Intermob Limited, the controller of your personal data, is established in Hong Kong. Where our EU-based service providers, such as our hosting providers, make personal data stored in the EU available to us, this constitutes a transfer of personal data outside the EU. Hong Kong is not covered by a European Commission adequacy decision, so such transfers are made on the basis of the Standard Contractual Clauses approved by the European Commission (Commission Implementing Decision (EU) 2021/914). You may obtain a copy of the relevant safeguards by contacting us via the details in Section 10.
In certain circumstances, personal data collected through third-party analytics or advertising tools may be transferred to, processed or stored outside the EU by those third-party providers. Where such transfers occur, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognised mechanisms, and where required additional measures to ensure an adequate level of protection for your personal data.
In particular, data collected by Google (Analytics, Ads), Meta, Microsoft (Clarity), LinkedIn, Reddit and Impact may be transferred to and processed in the United States. Where the recipient is certified under the EU-U.S. Data Privacy Framework, the transfer takes place on the basis of the European Commission's adequacy decision under Article 45 GDPR; where a transfer is not covered by that Framework, we rely on Standard Contractual Clauses. Data processed by AppsFlyer may be transferred to Israel, which is covered by a European Commission adequacy decision, and to the United States on the bases described above. You may obtain a copy of the relevant safeguards by contacting us via the details in Section 10.
Yandex Metrika and Yandex advertising technologies involve processing of data on servers located in the Russian Federation. For this reason, these tools are not loaded for users in the EEA under any consent state, and no personal data of EEA users is transferred to Yandex.
We take all practicable steps to ensure that your personal data is protected against unauthorised or accidental access, processing, erasure, loss, or use, including by requiring third-party service providers to implement appropriate technical and organisational security measures.
8. Do You Share My Personal Data?
We do not sell your personal data. However, we may share certain personal data, such as data collected via cookies and online identifiers and usage data, with third-party analytics, advertising service providers and attribution partners as outlined in Section 11.
After a purchase, we also share your name, email address (one associated with your account or one you provide for this purpose) and an order reference with Trustpilot A/S for the sole purpose of sending you an invitation to review our services (see Part 11.4).
We also use service providers to operate the Platform: Google Firebase for authentication and for delivering push notifications in our mobile applications; Apple and Google where you choose to sign in with your Apple or Google account; and Reown for connecting crypto wallets. These providers process only the data necessary to provide the respective function.
When you make a payment, your transaction is processed by a third-party payment processor. We share only the data necessary to complete your payment (such as transaction amount and currency) with that processor. The identity of our current payment processor(s) is available upon request via the contact details in Section 10.
If we share any of your personal data with third parties as described above, we will take all appropriate steps to ensure it is processed securely and in accordance with applicable data protection laws and your rights.
Where any personal data is transferred outside of the EU, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognised mechanisms, and where required additional measures to ensure an adequate level of protection for your personal data.
9. Your Rights
Under applicable Data Protection Legislation you may have certain rights in relation to your personal data, depending on your location. These may include the following:
9.1 Right of Access — you have the right to request a copy of the personal data we hold about you (commonly known as a subject access request). All such requests should be made in writing via the contact details in Section 10. There is normally no fee; however, if your request is manifestly unfounded or excessive, a reasonable administrative fee may be charged. We aim to respond within 20 calendar days and in any case no later than one month of receiving your request.
9.2 Right to Rectification — you have the right to request that we correct any inaccurate or incomplete personal data we hold about you without undue delay.
9.3 Right to Erasure ("Right to be Forgotten") — you have the right to request that we delete your personal data where there is no compelling reason for its continued processing, for example where the data is no longer necessary for the purpose for which it was collected.
9.4 Right to Restriction of Processing — you have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have contested.
9.5 Right to Data Portability — you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
9.6 Right to Object — you have the right to object at any time to the processing of your personal data for direct marketing purposes, or where processing is based on our legitimate interests.
9.7 Rights Related to Automated Decision-Making — you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you.
9.8 Right to Withdraw Consent — where processing is based on your consent (including cookies and app tracking), you may withdraw it at any time: on the website via the Manage cookie button in the footer, in the web application via Account → Manage cookie, and in the mobile applications via Account → Privacy. Withdrawal does not affect the lawfulness of processing carried out before it.
9.9 To exercise any of the rights listed above, please contact us using the details provided in Section 10. We will respond to all legitimate requests within one month. We may need to verify your identity before processing your request.
9.10 If you are located in the EU and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority. If you are located in Hong Kong, you may contact the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.
10. How Do I Contact You?
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details:
- Email: info@tonmobile.com
11. Use of Analytics and Advertising Technologies
We use analytics, advertising, attribution and other technologies on our Platform and in our mobile applications to understand how our services are used, improve our products, measure marketing performance, and support advertising and partner attribution. The use of these technologies is subject to applicable consent requirements and the choices described in this Privacy Policy.
11.1 Google Analytics and Google Ads
We use Google Analytics to analyse how users interact with our Platform, such as pages visited, time spent and device information. We use Google Ads to measure advertising performance and, where applicable, support remarketing.
These services may involve processing personal data and international transfers. Where required, we rely on appropriate safeguards for such transfers.
11.2 Meta (Facebook) Pixel
We use the Meta Pixel to measure advertising performance, understand interactions with our Platform, and support advertising and remarketing on Meta platforms.
The Pixel may process information about your visits, interactions and conversions.
11.3 Reddit Pixel
We use the Reddit Pixel to measure conversions and the effectiveness of our Reddit advertising campaigns.
The Pixel may process information such as IP address, browser or device information and interactions with our Platform.
11.4 Trustpilot
We use Trustpilot to collect and display customer reviews and, following a purchase, may share your name, email address and order reference with Trustpilot so that it can send you an invitation to provide a review.
Trustpilot acts as our processor when sending review invitations and as an independent controller when you submit a review.
11.5 Meta SDK
We use the Meta SDK in our mobile applications to measure advertising performance and support app advertising and attribution.
Depending on applicable permissions and settings, the SDK may process device advertising identifiers (such as IDFA or Android Advertising ID), app activity and purchase information.
On iOS, access to the IDFA for tracking purposes is subject to Apple's App Tracking Transparency framework. If permission is not granted, the IDFA is not accessed for those purposes.
11.6 AppsFlyer (mobile applications)
We use the AppsFlyer SDK in our mobile applications to measure app installs, attribute them to marketing campaigns and partners, and analyse app events.
AppsFlyer may process device advertising identifiers, IP address, device and operating system information, and app event data such as installs, launches and purchases.
11.7 Impact (partner attribution — website and mobile applications)
We use Impact for partner and affiliate attribution on our websites and in our mobile applications.
Impact may process attribution identifiers, device information, IP address and transaction information such as order amount and currency to attribute purchases to referring partners and calculate partner rewards.
11.8 Yandex Metrika
We use Yandex Metrika to analyse how users interact with our Platform, including information about visits, traffic sources and device information. Where enabled, it may also provide session replay functionality. We may also use this data to support advertising and remarketing through Yandex advertising services.
11.9 Microsoft Clarity
We use Microsoft Clarity to understand how users interact with our Platform, including through heatmaps and session replay. Clarity may use analytics and marketing technologies.
11.10 LinkedIn Insight Tag
We use the LinkedIn Insight Tag to measure the performance of our LinkedIn advertising campaigns and, where applicable, support remarketing.
It may process information about your device, browser and interactions with our Platform.
11.11 Mobile applications: App Tracking Transparency (ATT) and in-app privacy notice
On iOS, we request permission through Apple's App Tracking Transparency framework before accessing the IDFA for purposes covered by Apple's tracking rules.
On Android, advertising identifiers may be used for advertising attribution.
On first launch, our mobile applications provide an in-app privacy notice explaining the main categories of data collected and the purposes of processing, with a link to this Privacy Policy.
11.12 GrowthBook (A/B testing)
We use GrowthBook on our website, web application and mobile applications to conduct A/B tests and improve our products and user experience.
GrowthBook operates in local evaluation mode: the experiment configuration is downloaded to the relevant application or browser, and the assignment to a test variant is calculated locally. We do not transmit user identifiers, advertising identifiers or device fingerprints to GrowthBook.
Our analytics systems may record experiment exposure and conversion events. Where these events are associated with an account or other identifier, they may constitute personal data and are processed in accordance with the applicable legal basis and privacy choices described in this Privacy Policy.
12. Cookies
A cookie is a small text file placed on your computer or device by our Platform when you visit certain parts of our site and/or when you use certain features of our services. References to "Cookies" in this Part include similar technologies that store or access information on your device (localStorage, service workers, pixels, mobile SDKs).
Our Platform may place and access certain first-party Cookies on your device. These Cookies are placed directly by us and are used solely by us to enhance and personalize your experience and to provide and improve our Platform. We ensure that your privacy and personal data are protected and respected at all times.
By using our Platform, you may also receive certain third-party Cookies. These are Cookies placed by websites or parties other than us. Third-party Cookies are typically used for features like analytics, performance monitoring, or additional functionality. These Cookies are not essential to the functioning of our Platform and your experience will not be impaired if you refuse them. These Cookies are described in more detail in Part 11.
Before any non-essential Cookies are placed on your device, you will be shown a clear prompt (e.g., a pop-up) requesting your consent to place them. By giving your consent, you enable us to offer you the best possible experience and service.
Certain features of our site and services rely on Cookies to function correctly. These are considered "strictly necessary" Cookies for functioning of the Platform. Your consent is not required for these, but you may disable them in your browser settings. However, if you disable them through your browser settings, some parts of our Platform may not function properly. These cookies are placed on the basis that they are strictly necessary to provide the service you have expressly requested (the exemption under Article 5(3) of the ePrivacy Directive); the underlying processing of personal data is based on the performance of our contract with you and our legitimate interest in the security and integrity of the Platform.
12.1 Managing and Deleting Cookies
In addition to the controls we provide, you can manage Cookies through your internet browser settings. Most browsers allow you to block all Cookies, only third-party Cookies, or specific Cookies. You may also delete Cookies already stored on your device.
Please note that deleting or blocking Cookies may remove saved preferences (such as login information) and affect the functionality and performance of our site or services.
We recommend keeping your browser and operating system up to date and referring to the official help and support resources from your browser or device manufacturer if you need assistance with privacy settings.
12.2 Cookies and Similar Technologies We Use
Necessary — required for core functions: signing in, your cart, payment, and security. The site will not work without them, so they cannot be switched off. No consent is required.
| Identifier | Type | Provider | Duration | Domain | Purpose |
|---|---|---|---|---|---|
| <auth token> | localStorage | TonMobile | Until sign-out | web.tonmobile.com | Stores the authorisation token |
| g_state | Cookie | Google Identity Services | 6 months | web.tonmobile.com | Google One Tap sign-in state |
| cw_conversation | Cookie | Chatwoot | 1 year | web.tonmobile.com | Support chat session |
| tm_consent | Cookie | TonMobile | 2 years | .tonmobile.com | Stores your cookie consent decision |
| tm_consent_mode | Cookie | TonMobile | Session | .tonmobile.com | Cache of the edge full/light consent-mode decision |
| ton-connect-storage_* | localStorage | TonConnect (TonMobile) | Until cleared | 1st party | TON wallet connection state |
| __stripe_mid | Cookie | Stripe | 1 year | 1st party | Fraud prevention for card payments |
| __stripe_sid | Cookie | Stripe | 30 min | 1st party | Fraud prevention, payment session |
| __cf_bm | Cookie | Cloudflare | 30 min | 1st party | Bot protection |
| cf_clearance | Cookie | Cloudflare | Up to 1 year | 1st party | Challenge clearance |
| _cfuvid | Cookie | Cloudflare | Session | 1st party | Rate limiting |
| firebase:authUser:* | IndexedDB / localStorage | Google Firebase | Until sign-out | 1st party | Authentication session state |
| wagmi.store, wc@2:*, @appkit/* | localStorage | Reown (TonMobile) | Until cleared | 1st party | Crypto wallet connection state |
Analytics — help us see how you use the site: which destinations and plans you look at and what information interests you. Set only with your consent (Consent Mode v2 flag: analytics_storage).
| Identifier | Type | Provider | Duration | Domain | Purpose |
|---|---|---|---|---|---|
| _ga | Cookie | Google Analytics 4 | 2 years | .tonmobile.com | User identifier |
| _ga_BM3T2WK065 | Cookie | Google Analytics 4 | 2 years | .tonmobile.com | Session state |
| FPID | Cookie | Google Analytics 4 | 1 year | .mobile.tg | First-party identifier, server-side tagging |
| _ym_uid | Cookie | Yandex Metrika | 1 year | .tonmobile.com, .mobile.tg | User identifier |
| _ym_d | Cookie | Yandex Metrika | 1 year | .tonmobile.com, .mobile.tg | Date of first visit |
| _ym_isad | Cookie | Yandex Metrika | 2 days | .tonmobile.com | Ad-blocker detection |
| _ym_debug | Cookie | Yandex Metrika | Session | web.tonmobile.com | Counter debug mode |
| _ym_visorc | Cookie | Yandex Metrika | 30 min | 1st party | Webvisor — session recording |
| _ym_synced | localStorage | Yandex Metrika | Until cleared | 1st party | Identifier synchronisation |
| _ym_retryReqs | localStorage | Yandex Metrika | Until cleared | 1st party | Queue of unsent hits |
| _ym_106456204_lastHit | localStorage | Yandex Metrika | Until cleared | 1st party | Time of last hit |
| _ym_106456204_lsid | localStorage | Yandex Metrika | Until cleared | 1st party | Session identifier |
| _ym_106456204:0_reqNum | localStorage | Yandex Metrika | Until cleared | 1st party | Request counter |
| Service Worker Stape | Service Worker | Stape | Until unregistered | servergtm.mobile.tg | Proxying tag requests in first-party mode |
| _clck | Cookie | Microsoft Clarity | 1 year | 1st party | Clarity user identifier |
| _clsk | Cookie | Microsoft Clarity | 1 day | 1st party | Joins page views into one session |
| CLID | Cookie | Microsoft Clarity | 1 year | clarity.ms | First visit with Clarity |
| SM | Cookie | Microsoft | Session | c.clarity.ms | MUID synchronisation |
| gbFeaturesCache | localStorage | TonMobile (GrowthBook SDK) | Until cleared | 1st party | Cache of A/B feature-flag configuration; contains no user data |
| device_id | localStorage | TonMobile (GrowthBook SDK) | Until cleared | 1st party | Pseudonymous UUID for stable assignment to an A/B test variant |
| analytics_outbox | localStorage | TonMobile (GrowthBook SDK) | Until cleared | 1st party | Buffer of unsent A/B test analytics events |
Marketing — help us understand which ads perform best and reach people who may be interested in our offers, via Google, Meta and other advertising platforms. Only a technical identifier from your browser is shared; account credentials or payment details are never shared. Set only with your consent (Consent Mode v2 flags: ad_storage, ad_user_data, ad_personalization).
| Identifier | Type | Provider | Duration | Domain | Purpose |
|---|---|---|---|---|---|
| _fbp | Cookie | Meta Pixel | 90 days | 1st party | Browser identifier |
| _fbc | Cookie | Meta Pixel | 90 days | 1st party | Click attribution (fbclid) |
| fr | Cookie | Meta | 90 days | .facebook.com | Advertising identifier, retargeting |
| yandexuid | Cookie | Yandex | 1 year | .yandex.ru | Cross-service identifier in the Yandex ecosystem |
| yuidss | Cookie | Yandex | 1 year | .yandex.ru | Identifier synchronisation between services |
| yabs-sid | Cookie | Yandex (YABS) | Session | mc.yandex.ru | Yandex advertising system session |
| i | Cookie | Yandex | 1 year | .yandex.ru | Browser identifier |
| ymex | Cookie | Yandex | 1 year | .yandex.ru | Service timestamps |
| bh | Cookie | Yandex | 1 year | .yandex.ru, .yandex.com | Client Hints: OS, browser version, architecture |
| mdd | Cookie | Yandex | 1 year | .tonmobile.com, .yandex.ru | Metrika service flag |
| is_gdpr, is_gdpr_b, gdpr | Cookie | Yandex | 1 year / session | .yandex.ru | GDPR applicability detection |
| receive-cookie-deprecation | Cookie | Yandex | 1 year | .yandex.ru | Third-party cookie deprecation testing |
| _gcl_au | Cookie | Google Ads | 90 days | 1st party | Conversion linking |
| _gcl_aw, _gcl_gs | Cookie | Google Ads | 90 days | 1st party | Click attribution (gclid) |
| IDE | Cookie | 13 months | doubleclick.net | Retargeting | |
| test_cookie | Cookie | 15 min | doubleclick.net | Cookie support check | |
| IR_gbd, IR_<id> | Cookie | Impact | 30 days – 1 year | 1st party | Partner attribution |
| _irclickid | Cookie / localStorage | Impact | 30 days | 1st party | Click id storage |
| _rdt_uuid | Cookie | Reddit Pixel | 3 months | 1st party | Visitor identifier, attribution, remarketing |
| _rdt_em | Cookie | Reddit Pixel | 90 days | 1st party | Event match — linking events to campaigns |
| reddaid | Cookie | 2 years | .reddit.com | Advertising identifier, account matching | |
| li_fat_id | Cookie | 30 days | 1st party | Click ID for conversion attribution | |
| bcookie | Cookie | 1 year | .linkedin.com | Browser identifier | |
| lidc | Cookie | 24 h | .linkedin.com | Routing, data-centre selection | |
| UserMatchHistory | Cookie | 30 days | .linkedin.com | ID synchronisation for remarketing | |
| AnalyticsSyncHistory | Cookie | 30 days | .linkedin.com | ID synchronisation | |
| li_sugr | Cookie | 90 days | .linkedin.com | Probabilistic device matching | |
| li_gc | Cookie | 6 months | .linkedin.com | Consent for LinkedIn guest cookies | |
| MUID | Cookie | Microsoft | 1 year | .clarity.ms | Microsoft cross-domain identifier |
| ANONCHK | Cookie | Microsoft | 10 min | c.clarity.ms | Transfer of MUID to the advertising ANID |
| MR | Cookie | Microsoft | 7 days | c.clarity.ms | MUID refresh |
12.3 Consent Records
When you make or change a choice in our cookie banner, in the cookie settings (Manage cookie) or in the privacy notice and settings of our mobile applications, we record it in our consent log. Each record includes: a consent identifier (a pseudonymous identifier before you sign in, which is linked to your account once you sign in); the date and time; the action taken (accept all, reject all, custom selection, change or withdrawal); the resulting choice for each category; the platform and the language of the text shown to you; and a reference to the exact version of this Privacy Policy and of the cookie banner or in-app notice that was presented to you.
Consent records are never overwritten. Every change or withdrawal of consent is recorded as a new entry, so that the full history of your choices is preserved.
When you withdraw consent for a category, the collection of new data for that category stops immediately, Cookies of that category placed on our own domains are removed from your device, and the withdrawal is also applied to our server-side tagging, so that no further data is sent to the analytics and advertising providers concerned. Withdrawal does not recall data already sent to those providers before it; you may request the erasure of data we hold as described in Part 9.
Consent records are retained for as long as necessary to demonstrate that your consent was obtained and respected (see Part 6).
13. How Can I Access My Personal Data?
You have the right to request access to the personal data we hold about you and to obtain a copy of it.
You may submit a request using the contact details provided in Section 10. We may need to verify your identity before processing your request.
We will respond to your request within the timeframes required by applicable data protection laws. In general, we aim to respond within one month of receiving your request. In certain circumstances, for example where your request is complex or you have made multiple requests, we may require additional time, in which case we will inform you accordingly.
There is normally no charge for making a request. However, where permitted by applicable law, we may charge a reasonable administrative fee or refuse to act on a request that is manifestly unfounded or excessive.
14. Complaints About Our Services
If you wish to make a complaint about our services or customer support, please refer to our Complaints Policy available at https://tonmobile.com/complaints. All personal data submitted as part of a complaint will be processed in accordance with this Privacy Policy and treated with strict confidentiality.
15. Changes to this Privacy Policy
We may change this Privacy Policy from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
Any changes will be made available on https://tonmobile.com/privacy.
Each version of this Privacy Policy is identified by a version number and an effective date, shown at the top of this document. When we publish a new version, we keep a verified copy of it, together with the texts of the related cookie banner and in-app privacy notice, stored in a way that allows us to demonstrate its exact content and the date from which it applied. Each consent record (Part 12.3) refers to the specific version that was presented to you. Previous versions are available on request via the contact details in Section 10.
Intermob Limited · 79904463 · 8F, 30 Hollywood Road, Central, Hong Kong
2026 © TonMobile. All rights reserved