Privacy policy
Last updated: 7 October 2026
contact.page is a directory of local businesses. Every business gets its own free page (for example name.contact.page). This policy explains what we collect when you visit, when you unlock a business's contact details, and when a business owner talks to us. contact.page is run by Yellow Tower Co., Ltd., Phnom Penh, Cambodia ("we").
The short version
- You can read every page without giving us your name, number or email.
- Business phone numbers, WhatsApp and email sit behind a quick security check, so scrapers and spam bots can't collect them.
- We use Google Analytics to count visits, Google AdSense to show ads that keep the site free, and Cloudflare Turnstile for the security check.
- We never sell contact lists, and we don't sell your personal data.
- A business can correct or remove its page at any time.
1. When you visit a page
Server logs. Like every website, our servers record each request: IP address, browser and device type, the page asked for, the referring page, and the time. We use logs to keep the site running and safe (for example to spot bulk scraping), and we keep them for up to 30 days.
Google Analytics. We use Google Analytics 4 to learn which pages people use and how they reach them. It uses cookies and records things like pages viewed, device type, approximate location (country or city, never your exact address) and actions on our pages, such as passing the security check or tapping a contact button. We keep this data for up to 14 months. Google's policy: policies.google.com/privacy. To opt out on any website, use Google's browser add-on: tools.google.com/dlpage/gaoptout.
Advertising. Ads from Google AdSense keep contact.page free. Google and its partners use cookies to show ads, and may show ads based on your earlier visits to this and other websites. Where the law requires your consent first (for example in the EU, the UK and Switzerland), we ask before any ad cookie is set. You can turn off personalised ads at adssettings.google.com, and learn how Google uses data from sites like ours at policies.google.com/technologies/partner-sites. There are no ads on the security check page.
2. When you unlock a business's contact details
Security check (Cloudflare Turnstile). To keep business phone numbers, WhatsApp and email away from scrapers and spam bots, our contact details pages use Cloudflare Turnstile, a security check run by Cloudflare, Inc. Turnstile works in your browser and uses only the technical signals it needs to tell people from automated programs, such as your IP address and information about your browser and device. It does not read what you type on the page. How Cloudflare handles this data is described in the Turnstile Privacy Addendum: www.cloudflare.com/turnstile-privacy-policy/
The "I am…" choice. Before you unlock, you tell us who you are: a customer, a supplier, a job seeker, the owner, or someone working there. We record your choice with the visit, without your name, to understand who uses contact.page and to show the right next step (an owner, for example, sees how to claim the page). It is not shared with the business as information about you.
The "verified" cookie. When you pass the check, we set a cookie named cp_verified so you don't have to repeat the check on your next visit. It is signed so it can't be faked, it contains no personal details, and it lasts one year. You can delete it in your browser at any time; you will then see the check again.
Taps and feedback. We count taps on the contact buttons (call, WhatsApp, email), and, when you tell us whether a number worked, we record your answer. This keeps the contact details on each page correct. To stop misuse, we may limit how many contact details one browser or network can unlock; any counts we keep for this are deleted after 30 days.
AI help. Where a page offers an "Ask AI" button, it opens Google AI Mode in a new tab. What you type there is handled by Google under its own privacy policy, not by us.
3. If you run a business listed on contact.page
Your business page. Pages show public business information: name, category, address, opening hours, products and services, photos, and contact details. It comes from public sources and from businesses themselves. Contact details show only after the security check, and we keep them out of the page code that search engines and bots read. When AI assistants read our pages, we ask them to send people to your contact page instead of copying your number.
Claim, edit, remove, report. When you message us on WhatsApp or email us (for example to claim, update or remove your page, or to sign up for a free site), we keep your phone number or email address and your messages to handle your request and run your site. Our AI agent reads your messages and answers them; a person checks when needed. We keep these messages while we run your site or handle your request, and delete them within 12 months after that, unless the law requires us to keep them longer.
Removal. Tap "Remove" on your page, or write to us. We take the page down, and we keep only a note that it was removed, so it isn't added again.
4. Who we share data with
We share data only with companies that help us run contact.page, and only what each one needs:
- Google (analytics and ads), as described above.
- Cloudflare (the security check).
- Meta (WhatsApp), when you message us on WhatsApp.
- Our hosting, email and AI providers, who process data on our behalf and not for their own purposes.
Some of these companies are in other countries, including the United States, so your data may be processed outside your country. We may also share data when the law requires it or to protect our users from fraud or abuse. We never sell contact lists, and we don't sell your personal data.
5. Your choices and rights
- Cookies: you can block or delete cookies in your browser. Without the
cp_verifiedcookie you will see the security check on every visit. - Ads: turn off personalised ads at adssettings.google.com.
- Your data: you can ask what we hold about you, and ask us to correct or delete it. Depending on where you live (for example under the EU or UK GDPR, Thailand's or Malaysia's PDPA, Indonesia's PDP Law or the Philippines' Data Privacy Act), you may have more rights, such as objecting to how we use your data or complaining to your data protection authority. Write to us and we will reply within 30 days.
6. Children
contact.page is a business directory and is not meant for children under 13. We don't knowingly collect data from children. If you think a child has sent us personal data, write to us and we will delete it.
7. Changes
When we change this policy, we update it on this page and change the date at the top. If a change matters a lot, we will also say so on the home page.
8. Contact
Yellow Tower Co., Ltd., Phnom Penh, Cambodia
Email: privacy@contact.page
WhatsApp: @page.me