Delete my data
You can ask us to delete the emails you sent SassaCheck by emailing hello@sassacheck.org.za.
What data we hold
The home-page checker processes your ID number and cellphone number through our server to retrieve your result from SASSA. It does not save the raw ID, phone number or result in its application database. Separate security counters and hosting logs are retained as described in our privacy policy. We may also retain correspondence you send us.
| What we keep | Why | How long | Can you delete it? |
|---|---|---|---|
| Keyed hashes of the IP address and applicant ID, with request counters | Rate limiting and abuse prevention | Expiry is set to 10 minutes after an allowed request; deletion follows asynchronously | Automatic Firestore TTL cleanup after expiry; contact us with a specific data request. |
| Emails you send us: your email address and your message | To reply to you | For handling the enquiry and any applicable recordkeeping obligations; contact us to request deletion. | Email hello@sassacheck.org.za to request deletion. |
| Operational hosting logs, including connection metadata and IP addresses | Security and uptime | 30 days for the default operational log bucket | Retention is applied by the hosting provider. Contact us about a specific request. |
| Administrative audit logs (Google Cloud) | Records of administrative actions, separate from status-result storage | 400 days in the required audit-log bucket | Managed by Google Cloud retention controls. |
For status-check data, security-record retention and advertising cookies, read our privacy policy and cookie policy.
What happens when you check your status
Your ID number and cellphone number are sent to our server and passed to SASSA's public status service.
The form holds the result in the current page memory. It does not write the result to cookies, local storage or session storage. Reloading or closing the page clears that page state; browser history, autofill and device behaviour remain under your control.
How to request deletion
Email hello@sassacheck.org.za to ask us to delete your data.
- Put "Delete my data" in the subject line.
- Send from the email address you used, or list every address you used.
- Tell us if you want all emails deleted or only some.
Do not send your ID number or cellphone number. We do not need them to find your emails.
How long we take
We reply within 2 business days.
Our reply will tell you what we deleted and what we cannot delete.
What we cannot delete
There is no separate analytics page-view dataset. Security logs and rate-limit counters have their own retention controls.
- SassaCheck uses Google AdSense to display advertising. Google and its advertising partners may use cookies or similar technologies and process IP addresses, browser/device information and ad interactions for advertising, measurement and fraud prevention. We do not send status-form ID numbers, cellphone numbers or results to AdSense. We do not use a separate Google Analytics tag.
- The default Google Cloud operational log bucket retains request metadata, including IP addresses, for 30 days. Separate administrative audit logs are retained for 400 days.
Contact us with your request. We will explain what can be deleted and whether any security or recordkeeping requirement affects the request.
POPIA section 24
POPIA section 24 is the route for asking us to correct or delete your personal information.
Use the email address above. We handle deletion requests under POPIA section 24. If you think the email we hold is wrong, you can ask us to correct it.
Who runs SassaCheck
Operator, registration and Information Officer details are available on request. Contact us at hello@sassacheck.org.za.
SassaCheck is an independent service. We are not SASSA and not a government website. We cannot approve, decline or change any grant.
Sources
This page is based on our own data inventory and POPIA section 24. Sources checked 29 October 2026.
- POPIA, section 24.
- SassaCheck data inventory and retention schedule, reviewed 29 October 2026.
If any source is wrong or out of date, email hello@sassacheck.org.za and we will fix this page.
Last reviewed: 29 October 2026
Your ID number and cellphone number are sent over HTTPS through our server to SASSA to retrieve your status. Our checker does not save the raw ID number, cellphone number or result in its application database, and its application logging code does not record those values. The result is held in the current page memory, without saving it to cookies, localStorage or sessionStorage. For rate limiting, keyed hashes of your IP address and applicant ID are stored with request counters; their expiry is set to 10 minutes after an allowed request, and Firestore deletes expired records asynchronously. Google Cloud request logs can contain your IP address and connection metadata: the default operational log bucket retains records for 30 days, while the separate administrative audit log bucket retains records for 400 days. These audit logs are administrative records, not a 400-day database of status results. Google AdSense may use cookies and process IP, device and ad-interaction data; our code does not send status-form details or results to AdSense. We do not use a separate Google Analytics tag. See our Privacy Policy for details.
See the SASSA contacts page for current official guidance.