Privacy policy

Last updated September 18, 2026

ULS Lookup is an unofficial, read-only search for public FCC Amateur and GMRS license records. This policy covers the ULS Lookup website, Android app, and desktop app operated by Crash United, LLC.

What the lookup sends

When you search, the app sends what you entered to api.ulsf.cc over HTTPS. The service uses those values to answer that one request and keeps neither them nor the records they return in its logs.

Search state may appear in the page URL so you can reload, bookmark, or share a result. Your browser keeps that URL in its history, and anyone you share it with can read its search fields.

Operational and security data

The service logs a request ID, route, response status, latency, and FCC dataset version for reliability and abuse prevention. Those logs contain no query string or response body and are kept no longer than 30 days.

Cloudflare and Google Cloud handle network information, including IP addresses, for encrypted delivery, rate limiting, security, hosting, and monitoring. Their infrastructure may retain access records under their own policies.

The Android app keeps a diagnostics record on your device for the offline data and automatic update features: timestamps, event names, result and HTTP codes, request IDs, and app and Android versions. It contains no search text, license records, or credentials, and the app never sends it on its own. “Share diagnostics” in the Offline data screen hands it to your device’s share sheet, which sends it only where you direct.

Website analytics

The website can use Google Analytics 4 for coarse events such as which search mode you used and whether a lookup returned results. It never sends callsigns, FRNs, names, addresses, license details, or URL query parameters to Analytics.

Analytics storage is denied by default, and cookies and identifiers are enabled only if you choose “Allow” in the analytics prompt. Your choice is saved in your browser as ulsf.analytics-consent and can be changed under “Analytics settings” in the footer. Android and desktop builds exclude Analytics.

Public FCC records and external sites

Results come from public FCC Universal Licensing System files and may include a license holder’s name, address, FRN, license dates, and status. ULS Lookup does not create or control those records. Links to third-party resources open sites governed by their own policies.

Affiliate links

ULS Lookup may show labeled paid product links after an Amateur or GMRS license result, and Crash United may earn a commission on qualifying purchases. Products are chosen from the license service shown in the result. No lookup value selects them or travels in the link.

Affiliate links open Amazon without a referrer from ULS Lookup, and Amazon then applies its own privacy terms. F-Droid builds contain no product links.

Purchases and advertising

ULS Lookup has no accounts, contains no advertising SDKs, and does not sell personal data. Lookup is free. The Google Play build may offer optional paid offline features; the Monthly plan renews each month and the Annual plan each year through Google Play until you cancel there. When paid access ends, installed license data stays available offline, but automatic updates stop.

When you buy or restore a paid feature, the app sends the product, your Google Play purchase token, the billing integration version, and whether the purchase came from a test simulator to the ULS Lookup validator, which checks the token with Google Play. The service keeps a hashed copy of that token, purchase and entitlement state, and purchase, expiration, and verification times. Google Play handles payment. Crash United never receives card numbers, bank details, or your Google password.

Registering for automatic offline updates also stores an encrypted copy of the purchase token, so the service can confirm the subscription when the app updates in the background, along with random registration identifiers and authorization state. None of these are hardware identifiers, and none are used for advertising or analytics.

Retention

Lookup values are gone once the request completes, and operational logs expire on the schedule above. There are no accounts, so there is no profile to delete. You can clear search URLs and the analytics preference through your browser or app data controls.

Routine cleanup removes update registrations with no authorization activity for 90 days, and encrypted tokens that no longer have a registration. Unregistering your last installation removes its encrypted token. Purchase and notification records can remain for entitlement restoration, refunds, fraud prevention, and support, and backups may hold removed information for a time.

Data deletion requests

There is no account to delete. To have service-side information that can be linked to you removed, email [email protected] with the subject “ULS Lookup data deletion request.” For a purchase, include the Google Play order ID from your receipt, which normally begins with GPA.. Otherwise give the approximate date, time, and time zone.

After reasonable verification we delete the purchase records, encrypted tokens, update registrations, and operational records we can find from what you send. This does not cancel a subscription or issue a refund, and a later purchase, restore, or update registration creates new records. Cancel in Google Play to stop renewals. We cannot change or delete public FCC license records.

We keep only what law, accounting, refunds and chargebacks, fraud prevention, security, or legal claims require, and only as long as that lasts. We will tell you the outcome of your request.

Contact and support

Crash United, LLC
Privacy and support: [email protected]