Privacy Policy

How the services on this website handle information. We do not collect Social Security Numbers. Last updated 21 September 2026.

Last updated 21 September 2026.

1. Introduction

SSN Validator (the “Service,” “we,” “us,” or “our”) is an independent educational website at ssnvalidator.org. This Privacy Policy explains what information may be processed when you use the services on this website, what we do not collect, and how to exercise privacy rights.

The services on this website apply published format and reservation rules in your browser and publish educational material about those rules. They do not require an account.

By accessing or using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree with it, do not use the site. This policy works together with our Terms of Service and Disclaimer. Those documents explain permitted use and the limits of a format check. They do not change the fact that we do not collect Social Security Numbers.

Questions about this policy are covered in Section 10. Google LLC and other vendors named in this policy process some technical data under their own privacy policies.

SSN Validator is not the Social Security Administration, the Internal Revenue Service, or any other government agency. A result on this site is not official verification that a number was assigned to a person.

2. Information collection and use

The services on this website do not require an account, a name, an email address, a telephone number, a date of birth, or a Social Security Number. What a visit may involve is described below.

The information that may exist around a typical visit is described below: host and server logs, information you type into the services that never reaches us, and cookies or similar technologies placed by us or by third parties such as Google.

2.1 Log data

When you request a page, the host and our servers may automatically record ordinary web-server log data. That log data may include:

Your device’s Internet Protocol (IP) address
Browser type and version (user agent)
Operating system, as reported by the browser
The address of the page you requested
Date and time of the request
Referring URL, if the browser sends one
Standard connection details such as status code and approximate response size

These are typical hosting logs. They exist to operate the site, diagnose errors, and understand which pages are requested. Host and server logs should not contain a Social Security Number. The services on this website do not put digits in the URL, in a query string, or in a form post to our servers. A log line records a page address, not a number you typed.

We keep host logs only for as long as they are needed to operate, secure, and troubleshoot the site. We do not publish a fixed number of days. The host may rotate or delete them on its ordinary schedule. We do not keep a separate copy in order to build a profile of you, and we do not keep Social Security Numbers at all. Our hosting provider processes those logs so the site can be delivered. Where Google Analytics is used, Google’s default Analytics retention is up to 26 months (see Section 3).

2.2 Social Security Numbers and browser processing

We do not collect, store, or transmit Social Security Numbers. Information you type into the services on this website is processed in your browser. Digits and other figures stay in page memory for that visit. They are not written to a cookie, not placed in the address bar, and not sent to ssnvalidator.org as a payload we keep. There is no server-side process that receives those digits so we can score them for you.

Leaving or refreshing the page clears information you typed. We do not maintain a database of typed SSNs, and we cannot look up, retrieve, or delete a number you typed, because we never received it.

Do not type someone else’s Social Security Number. Do not send a Social Security Number to us. Official verification for employers is performed through Social Security Administration programs, not through the services on this website. See ssa.gov.

2.3 Cookies and similar technologies

Cookies are small text files (or similar storage) that a site or a third party may place on your device. The services on this website may use cookies and related technologies to:

Operate and measure the website
Understand how the services on this website are used
Deliver and measure advertisements through advertising partners, including Google AdSense

We do not use cookies to remember a Social Security Number or other figures you type. Those values stay in the browser for that visit. The services may use short-lived browser storage to remember a place on a page. That storage does not contain a Social Security Number.

You can block or delete cookies in your browser. Blocking third-party cookies or using a private window may limit advertising and analytics. The services do not require advertising cookies in order to apply format rules. Browser settings and the opt-out links in Section 3.4 are the controls for personalized advertising.

2.4 How we use information

We use the information described in this policy to:

Deliver the pages you request
Keep the site secure and diagnose errors
Understand, in aggregate, how the services are used
Display and measure advertisements, where advertising technologies are used
Comply with law and respond to lawful requests

We do not use that information to verify a Social Security Number, to match a name to a number, or to decide employment, credit, insurance, or housing.

2.5 Contact form

The contact form asks for a name, an email address, a topic, and a message. We do not keep a completed form.

Do not include a Social Security Number, an ITIN, an EIN, or anyone else’s identifier. The form rejects a message that contains a number in that shape. It is not a way to submit a number for checking.

The Service may use Google Analytics for measurement and Google AdSense for advertising. This section does not change Section 2.2: Social Security Numbers are not collected by us and are not placed in the URL for Google or anyone else to read from a query string.

When third-party scripts load, they see ordinary request context: the page address, your IP address, and your user agent. That is not the same as receiving digits you typed into the services.

3.1 Google Analytics

Google Analytics may record pages viewed, approximate location derived from IP address, device and browser information, referring site, and how you move between pages. That information is used in aggregate to see which pages are used, not to identify you by name or by Social Security Number.

Where Google Analytics is used, Google’s default data-retention period for Analytics is up to 26 months, unless a shorter period is configured in that product. We do not control Google’s infrastructure beyond the settings available to a site operator. Google’s own practices are described in Google’s Privacy Policy and Google Analytics data practices.

3.2 Advertising cookies

Google and its partners may set advertising cookies or similar technologies when an advertisement loads. Those cookies can be used to show ads based on visits to this site and other sites.

3.3 Personalized advertising

Third-party vendors, including Google, may use cookies to serve ads based on prior visits to this Service and other websites. Google’s advertising cookies enable it and its partners to personalize ads and to measure whether ads were shown or clicked. We do not choose the specific ad creative you see.

More detail on Google’s advertising technologies is in Google’s advertising policy.

3.4 Opting out of personalized advertising

You may opt out of personalized advertising on these independent pages:

Google Ad Settings: adssettings.google.com
Network Advertising Initiative: optout.networkadvertising.org
Digital Advertising Alliance: optout.aboutads.info

Opt-out cookies and browser settings are device-specific. Clearing cookies can reset an opt-out. These pages are operated by Google or industry groups, not by SSN Validator. We cannot confirm that an opt-out succeeded on their systems.

3.5 Third-party advertising disclaimer

WE DO NOT CONTROL THE CONTENT OF ADVERTISEMENTS OR THE COOKIES PLACED BY THIRD-PARTY ADVERTISERS. Third-party ad servers and ad networks use their own technology to display ads and links on ssnvalidator.org. They automatically receive your IP address when that occurs. Other technologies (cookies, JavaScript, or pixels) may be used to measure ads or to personalize what you see.

SSN Validator has no access to or control over cookies used by third-party advertisers. Consult those parties’ privacy policies for their practices. A third-party ad is not an endorsement, and it is not a government notice.

4. Special notice to parents (COPPA)

The Children’s Online Privacy Protection Act (COPPA) requires that operators of websites directed to children under 13, or that knowingly collect personal information from children under 13, follow specific rules. This section states how SSN Validator treats that issue.

4.1 Age restrictions

SSN Validator is not directed at children under the age of 13. A Social Security Number is an adult identifier used for work, taxes, credit, and benefits. This site is written for adults who need to understand format and reservation rules. We do not knowingly collect, maintain, or use personally identifiable information (PII) from children under 13.

4.2 Never type a child’s Social Security Number

Do not enter a child’s Social Security Number into the services on this website. Do not send a child’s number to the operator. Parents and guardians should keep a child’s card and number offline.

Even though the services do not transmit digits to us, typing a child’s number on any website is a poor practice. A device may be shared, a screen may be visible, or software on the device may capture field contents. If you need a card, a replacement, or a record change for a child, use ssa.gov and official SSA channels only.

4.3 How the site treats minors

The services on this website are designed so that they do not require personal information:

No account required. The services do not ask for a login, username, or password.
No SSN storage. See Section 2.2.
No request for a child’s identity. We do not ask for a child’s name, date of birth, address, or school information. The contact form is not a child’s profile, and it cannot accept a Social Security Number. See Section 2.5.

Host logs and third-party tags may still record that a device requested a page, as described in Sections 2 and 3. That is ordinary website traffic, not a child profile we build.

4.4 Parental rights

If you are a parent or guardian and believe a child under 13 has provided personal information to us, see Section 10. We do not knowingly collect personal information from children under 13. We cannot return or delete a child’s Social Security Number, because we never received it. Do not send that number to us.

Parents have the right to:

Ask whether we have collected personal information from their child
Request deletion of any such information if it exists
Refuse further collection or use of their child’s information

For identity theft involving a child, use IdentityTheft.gov and SSA, not this site.

5. Privacy rights (GDPR and CCPA)

Depending on where you live, you may have rights under the European Union’s General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA) as amended by the CPRA, or similar laws. This section describes those rights as they apply to a site that does not run accounts and does not store Social Security Numbers.

5.1 Legal bases

Where the GDPR or UK GDPR applies, we rely on the following bases for the personal data we actually process:

Legitimate interests. Operating the website, keeping it secure, understanding which pages are requested, and diagnosing errors, where those interests are not overridden by your rights.
Consent. Where the law requires consent for optional cookies, analytics, or personalized advertising. You may withdraw that consent through your browser settings and the opt-out links in Section 3.4.
Legal obligation. Where we must retain or disclose information to comply with law.

Digits you type into the services are not part of this processing. They stay in your browser.

If you are in the EEA or the United Kingdom, you may have the following rights, subject to legal limits:

Access. You may ask what personal data we hold about you.
Rectification. You may ask us to correct data that is inaccurate or incomplete.
Erasure. You may ask us to delete personal data in certain cases.
Restriction. You may ask us to limit how we process your data in certain cases.
Portability. You may ask for a copy of data you provided, in a portable form, where that right applies.
Objection. You may object to certain processing, including processing we base on legitimate interests.
Withdraw consent. Where processing is based on consent, you may withdraw it. Advertising and analytics opt-outs are the links in Section 3.4 and your browser settings.

To exercise these rights, use the contact details in Section 10. We cannot produce, correct, or erase a Social Security Number we never stored. We also may not be able to identify you from an IP address in a host log or from Google Analytics events alone. Do not send an SSN.

You may also have the right to lodge a complaint with a supervisory authority in your country.

5.3 Rights under the CCPA (California residents)

In the preceding 12 months, the personal information the services may collect falls in these categories:

Identifiers, such as an IP address and online identifiers such as a cookie ID where advertising or analytics technologies are used
Internet or network activity, such as the page you requested, the date and time, a referring address, and browser or device information
Approximate geolocation derived from an IP address, where analytics is used

We do not ask for your name, postal address, email address, or telephone number in order to use the services. We do not collect precise location. A Social Security Number is sensitive personal information under California law. We do not collect it, so there is no sensitive information in our hands for a “limit the use of my sensitive personal information” request to reach.

We may disclose the categories above to our hosting provider, so the site can be served, and to Google, where Analytics or AdSense is used, for measurement or advertising. We do not disclose personal information to third parties for their own direct marketing.

If you are a California resident, you may have the right to:

Know. Request the categories and, where required, specific pieces of personal information we have collected about you.
Delete. Request deletion of personal information we collected from you, subject to legal exceptions.
Correct. Request correction of inaccurate personal information we maintain, if any.
Non-discrimination. We will not deny the services on this website, or change their quality, because you exercised a CCPA right.

California residents who wish to limit Google’s personalized advertising should use the opt-out links in Section 3.4 and their browser or device settings.

5.4 Do not sell or share my personal information

SSN Validator does not sell personal information. Advertising cookies, where used, are operated by Google and its partners. California law can treat cross-context behavioral advertising as a “share.” You may opt out of that advertising with Google Ad Settings, the NAI opt-out, the DAA opt-out, and your browser, as described in Section 3.4.

5.5 Google tags

How Google uses cookies and similar technologies for Analytics and AdSense is governed by Google’s Privacy Policy and by your browser or device settings, for example blocking third-party cookies or using private browsing.

If you want this site without third-party advertising or analytics cookies, use a browser configuration that blocks them. The services on this website still run in your browser when the page itself loads.

5.6 Requests and automated decisions

We will respond to a privacy request within the time the applicable law requires. Under the GDPR that is generally one month, and the law allows a further extension of up to two months in some cases. Under the CCPA that is generally 45 days, and the law allows one further extension of up to 45 days in some cases. We may need enough detail to look for a log entry. We will not ask you for a Social Security Number in order to do that. If we cannot connect a request to personal information we hold, we will say so.

We do not use your personal information to make a decision that produces a legal effect, or a similarly significant effect, about you. A format result is produced in your browser from digits you type. It is not a decision about your identity, credit, employment, or benefits. Where personalized advertising is used, the advertising partner selects the ad. That is not a decision by us about your eligibility for anything.

6. Security of your data

6.1 HTTPS and transport security

The Service is served over HTTPS with TLS. Traffic between your browser and our host is encrypted in transit. That protects the pages you request. It is not a promise that a number typed into a field is hidden from people standing at your screen, from software on your device, or from a compromised endpoint.

6.2 What we do not hold

Section 2.2 is the protection for Social Security Numbers: we do not collect them, so there is no SSN archive on our servers.

Use a device you trust. Do not type a number on a shared or public computer if you would not want it seen. Leaving or refreshing the page clears information you typed into the services.

6.3 Limits of security

We cannot guarantee absolute security. No method of transmission over the internet, and no method of electronic storage, is completely secure. Hosting, browsers, and third-party scripts can fail. You acknowledge that (a) the internet has security and privacy limits beyond our control, and (b) we cannot guarantee the security, integrity, or privacy of every bit of information exchanged while you use the Service.

If you believe your Social Security Number has been misused, that is an identity-theft problem for IdentityTheft.gov and SSA. We cannot look a number up.

7. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page (currently 21 September 2026). Review this page periodically if you care how the Service handles data.

Material changes. If we make a material change to how we handle personal data, we will update this policy and the “Last updated” date before that change takes effect. Your continued use of the Service after a posted change means you accept the revised policy.

8. Third-party websites

The services on this website link to official sources and other websites we do not operate, including government sites and the privacy and advertising pages of our vendors. If you follow one of those links, you leave ssnvalidator.org. We do not control that site’s content, cookies, or privacy policy. We are not responsible for those practices. Read the policy on the site you visit.

An advertisement or an outbound link is not an SSA or IRS service we provide. Embedded or requested third-party resources, such as advertising or analytics, are also third-party services. Their data handling is described in their policies, not only in this one.

Our hosting provider may process technical log data in order to deliver the site. Where Google Analytics or Google AdSense is used, Google processes measurement or advertising data under its own terms. Those providers are not given Social Security Numbers.

9. International data transfers

Hosting and content delivery may process technical data on computers outside your state, province, or country, including in jurisdictions where data-protection laws differ from those where you live. Analytics and advertising requests may also be processed outside your country. A Social Security Number you type does not leave your browser, and it is not part of those transfers.

By using the Service, you understand that ordinary website telemetry may be processed wherever our host or Google maintain systems. Where that processing happens outside your country, it is covered by the international-transfer arrangements those providers publish, which may include standard contractual clauses or similar safeguards they offer.

10. Contact

Privacy questions may be sent through the Contact Us page. Do not send a Social Security Number. We cannot return or delete a number we never received.

Card replacement, benefit questions, and official record corrections: ssa.gov. Identity theft: IdentityTheft.gov.