Effective date: November 3, 2026 · Operated by Phonemine LLC

Phone Mine (“Phonemine,” “we,” “us”) operates tossvape.org, the Phonemine member portal, the Phonemine mobile app, and a network of IoT phone-recycling kiosks. This policy explains what information we collect, how we use it, and the choices you have. The short version: we collect the minimum needed to run the recycling network, we don’t sell your data, and we don’t show ads.

1. What we collect

Kiosk drop-offs (no account needed)

Our kiosks record the event itself — a timestamp and the measured weight of the deposit. Kiosks do not identify who made a drop-off. If you drop a device anonymously, we have no way to link it to you.

Devices you deposit

A deposited phone may contain personal data. We treat every device as if it does: devices that support it are sanitized to the NIST 800-88 standard, and devices that cannot be sanitized in software are routed to certified physical destruction or material recovery through R2-aligned downstream partners. We do not access, browse, copy, or attempt to recover the contents of deposited devices, and our chain-of-custody process is designed to prevent anyone else from doing so. See our Terms of Use for the full handling commitment.

Member portal accounts (optional)

If you register, we collect what you provide: name, email, optional organization and phone number, account type, and a password (stored hashed). Depending on your account type, we associate operational records with your account — for example which kiosks you host, your drop-off history if you choose to log it, and reports you generate.

Inquiry and application forms

Name, email, optional phone, and your message — used only to respond to you.

Collected automatically

Standard web server logs (IP address, browser type, pages requested, timestamps) and the cookies described in Section 5. Our hosting and CDN providers (Hostinger and Cloudflare) process this traffic data on our behalf to deliver and secure the site.

Mobile app

The Phonemine app is a wrapper around this website and collects the same information the website does, plus, only if you grant permission: your approximate or precise location, used solely to show kiosks near you. Location is used on-device for that lookup; we do not build location histories. You can revoke the permission at any time in your device settings and the app keeps working — you’ll just search by address instead. If you enable push notifications, a device push token is stored by our notification provider to deliver them.

2. What we use it for

To operate the kiosk network and chain-of-custody records; to provide member portal features (dashboards and reports); to respond to inquiries; to publish aggregate, community-level statistics (for example “22 lbs collected in Montrose” — never individual data); to secure the service; and to meet legal and audit obligations, including R2-aligned documentation.

3. What we don’t do

  • We do not sell or rent personal information. Ever.
  • We do not show third-party advertising or share data with ad networks.
  • We do not access the contents of deposited devices.
  • We do not publish resident-level data. Public dashboards, leaderboards, and Community Mining Awards use community-level aggregates only.

4. When we share

Only with: (a) service providers who process data on our behalf under contract (hosting, CDN, email, push notifications, data-sanitization tooling); (b) downstream recycling partners, who receive the physical devices and batch-level chain-of-custody documentation — not your account data; (c) host institutions, who see operational data for their own locations (counts, weights, timestamps — not resident identities); and (d) authorities where the law genuinely requires it.

Text messaging. We do not share, sell, or rent mobile phone numbers or text messaging opt-in data and consent with any third parties or affiliates for marketing or promotional purposes. The only exception is the messaging and phone carriers and service providers we use to deliver the messages you asked for (for example, Amazon Web Services).

5. Cookies

We use first-party cookies that are necessary for the site to work: WordPress login/session cookies for portal members, and performance/security cookies set by LiteSpeed Cache and Cloudflare. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser; logged-in portal features need them to function.

6. Data retention

Operational and chain-of-custody records are retained as required for audit and compliance purposes. Account data is kept while your account is active. You can ask us to delete your account at any time; we will remove your personal information except the minimal records we are required to keep for compliance, which are retained in de-identified or aggregate form where possible. Anonymous drop-off events contain no personal information and are retained as network statistics.

7. Text message alerts

Kiosk hosts and operators can choose to receive alerts about their kiosks by text message (SMS), for example subscription confirmations; when the drop-off door is opened or a drop-off is recorded; when a kiosk is nearly full or full, a pickup is scheduled, or the kiosk is emptied; low battery; safety alerts such as high temperature, tilting or tampering, or a door opened without authorization; device status such as offline, back online, a power or sensor fault, or weak signal; and monthly summaries. These alerts are optional and are sent only to numbers that the person signs up and opts in on our PhoneMine Kiosk Alerts page by entering a mobile number and checking the separate, optional text message box. Consent to receive alerts is not a condition of any purchase or service.

  • Message frequency varies with kiosk activity.
  • Message and data rates may apply.
  • Reply STOP to any message to opt out at any time. You will receive one confirmation and no further messages. Reply HELP for help, or contact [email protected] or 303-865-0856.
  • You can also ask us to remove your number at any time.
  • Carriers are not liable for delayed or undelivered messages.

We use your phone number only to send the alerts you chose. It is never used for marketing.

8. Your choices and rights

You may access, correct, or delete your account information, export your data, opt out of non-essential emails, and revoke app permissions at any time. Colorado residents have rights under the Colorado Privacy Act, including access, correction, deletion, and portability; we honor these requests for everyone, resident or not. Write to us at the address below and we’ll respond within 30 days. We do not discriminate against anyone for exercising privacy rights.

9. Children

Anyone is welcome to drop a phone in a kiosk. The member portal and app accounts, however, are intended for users 13 and older. We do not knowingly collect personal information from children under 13; if you believe a child has registered, contact us and we will delete the account.

10. Security

Traffic is encrypted with TLS. Passwords are stored hashed. Access to operational systems is restricted. Physical devices move through a documented, batch-tracked chain of custody from kiosk to certified downstream partner. No system is perfectly secure, but minimizing what we collect in the first place is our primary safeguard.

11. Changes

We’ll post any changes on this page and update the effective date. Material changes affecting portal members will also be announced in the portal or by email.

12. Contact

Phonemine LLC
6674 S Penrose Ct, Centennial, CO 80121
[email protected] · 303-865-0856