Privacy Policy

We practice data minimization: no name, address or phone number is collected. Email is optional and used only to send your eSIM.

We log the IP address and browser identification (User-Agent) of every request that creates something — an order, a support message, a review, a wallet or a top-up — and keep it for 90 days to detect fraud and abuse, after which it is deleted automatically. IP addresses are also used transiently for rate limiting.

Order records contain: plan, payment invoice id, eSIM identifiers (ICCID, activation data — encrypted at rest) and timestamps.

Crypto payments are processed by PayKilla and NOWPayments, third-party hosted payment gateways: you pay to an address the gateway controls and we only see the status of the invoice. Which of them holds a given payment is shown on the payment page. We never ask for or store your wallet keys, and blockchain transactions are public by nature.

Card payments, where offered, are processed by a third-party payment provider acting as the merchant of record: the charge appears on your statement under that provider's name and the provider accounts for any VAT or sales tax due. The provider is named on the payment page before you pay. We pass on only what is needed to take the payment — the amount and the card details you enter on the provider's own page; full card numbers never reach us and we never store them.

We use Google Analytics to count visits and see which pages and destinations get looked at. It stores cookies in your browser and sends Google a pseudonymous record: the page viewed, the page you arrived from, an approximate location derived from your IP address, and your device and browser type; Google may process this outside your country. It never receives your email address or any eSIM, order or payment identifier — the secret token in your order link is replaced before the page address is reported. Analytics is not needed to buy or use an eSIM: block it in your browser or with an extension and the store still works in full.

We do not sell data or share it with third parties, except our telecom supplier (to issue your eSIM), our payment processors (to take and refund payments), our analytics provider as described above, and cases required by law.

An account is optional: every eSIM can still be bought as a guest, with just the order link, exactly as today. If you create one, we store your email address, used to sign in and identify the account; a hash of your password, never the password itself; and, for each signed-in session, the IP address and User-Agent it started from, so you can see and revoke the devices connected to your account — kept for 90 days, the same period this policy already applies to every other record of a request. A passkey, if you add one, is stored as its public key, with the name you give it and when it was added and last used; the private key never leaves your device. Deleting your account removes the email address, the password hash, every session and every passkey. Your orders stay, because they are accounting records, and a wallet balance stays reachable with its wallet code even after the account is gone. The cookie that keeps you signed in is strictly necessary for that alone and needs no consent, unlike the analytics cookies described above.