Privacy policy

Mocom SAS · Sift · Effective 5 October 2026

Translation: in case of any discrepancy, the French version prevails.See the French version →

1. The data we process

• Your account: email address, name, and, if you sign in with Google or Apple, the information those services send us (name, email).
• Your top-ups and gift cards: phone number and operator of the person topped up, country, product, amount, date, delivery email address for a gift card, favourite numbers you save.
• Payment: it is handled by our payment providers. We never store your full card number; we only keep information such as the card brand, its last 4 digits and the payment result.
• The Sift Care programme and referrals: points, tier, referral code, referred friends.
• Customer service: your messages and the information needed to reply to you.
• Technical data: IP address, device and browser type, pages viewed, cookies (see section 6).

2. Why we use it

• Fulfil your orders (send the top-up or gift card, send you the receipt): necessary for the contract.
• Prevent fraud and secure payments: legitimate interest and legal obligations.
• Keep our accounts and answer the authorities: legal obligation.
• Help you when you contact customer service: contract and legitimate interest.
• Run Sift Care and referrals: contract.
• Write to you about our offers: with your consent, or, if you are already a customer, for similar services; you can unsubscribe at any time via the link in every email.
• Measure our audience and the effectiveness of our ads: with your consent given via the cookie banner.

3. Who receives your data

Only the people at Mocom SAS who need it, and our providers, each for its own task:

• Payment: Stripe, PayPal.
• Delivery of top-ups and gift cards: DT One, and the operators or brands concerned.
• Hosting of the website and data: Vercel, Supabase.
• Emails: Resend.
• Customer service: Zendesk. Your messages may be analysed by an artificial-intelligence assistant (Anthropic) that prepares or sends a reply; a member of the team can take over at any time.
• Audience measurement and advertising, with your consent: Google (Analytics, Ads) and Meta (Facebook, Instagram).

We never sell your data. Some providers are located outside the European Union, in particular in the United States: these transfers are governed by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

4. How long we keep it

• Account: as long as it is active, then 3 years after your last activity.
• Orders, receipts and invoices: 10 years, for our accounting obligations.
• Customer service messages: 3 years after the last exchange.
• Measurement and advertising cookies: 13 months at most.
• Participation in a game (quiz): 3 months at most after the end of the game.

5. Your rights

You can ask to access your data, correct it, delete it, receive a copy of it (portability), restrict or stop its use, withdraw your consent at any time, and give instructions for after your death. Write to us at support@sift-mobile.com from your account's email address. We reply within one month.

To delete your account, follow the steps on the page Delete my account and my data.

If you are not satisfied with our reply, you can lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.

6. Cookies

Cookies needed for the website to work (sign-in, basket, security) are always active. Audience-measurement and advertising cookies (Google, Meta) are only set with your consent, which you can give or refuse in the cookie banner and change at any time.

7. Our Facebook and Instagram accounts

Sift publishes on its Facebook page and its Instagram account @sift_mobile using the “Sift Publication” application. This application is used only to publish on Sift's accounts and read their statistics: it does not collect any personal data from Facebook or Instagram users. Comments and messages you leave on these networks are subject to Meta's rules.

8. Minors and security

Our services are intended for adults. We protect your data with appropriate technical and organisational measures (encrypted connections, restricted access, payments secured by our certified providers).

9. Changes

We may update this policy. The effective date is shown at the top of the page; in the event of a significant change, we will inform you.