Privacy Policy

Last updated: February 17, 2026

Open Gateway Sandbox

Open Gateway Sandbox ("the App") is an internal testing tool developed by Telefonica for validating Open Gateway APIs, including Number Verification and SIM Swap, using the GSMA TS.43 standard.

Information We Collect

The App requests the READ_PHONE_STATE permission solely to retrieve device identifiers required by the TS.43 certification process. This information is used exclusively for authenticating the device with the mobile operator during testing.

The App does not collect, store, or share any personal data beyond what is strictly necessary for the API testing flow. No data is sold to third parties.

Data Processing

• Operator Token: Generated during the OpenID4VP flow and used temporarily to call Open Gateway APIs. Not stored permanently.
• Phone Number: Retrieved or verified through the Number Verification API as part of the test. Not stored beyond the current session.
• Latency Metrics: Anonymous performance metrics (response times) may be recorded for quality analysis.

Data Retention

No personal data is retained after the testing session ends. Anonymous latency metrics may be stored for operational analysis.

Third-Party Services

The App communicates with Telefonica's Open Gateway aggregator to perform API calls. No data is shared with unrelated third parties.

Contact

For questions about this privacy policy, contact the Open Gateway team at Telefonica.