Privacy Policy

• Account data: your email and display name. Passwords are stored only as an Argon2id hash and cannot be recovered.
• Third-party sign-in: Google or Apple give us a user identifier and an email address. Apple may supply a private relay address.
• Order data: plans purchased, quantity, amount, currency and time.
• eSIM data: the profile's ICCID, activation string, supplier order and serial numbers, and expiry date.
• Authentication events: time, IP and browser user-agent for sign-in, sign-out and password resets. This detects account takeover, and you can review it on your account page.

We never see your card number. Payment happens on the provider's page; card details never pass through our servers.

• Telecoms supplier: to obtain profiles we submit orders to them. This includes your email address (a required field in their system), but not your name or phone number.
• Payment provider: processes payment and retains transaction records.
• Email provider: sends delivery emails and account notifications.
• Cloud infrastructure: our site and database run on rented servers, served through a CDN provider.

Beyond what is necessary to deliver the service, we do not sell or share your personal data — except where required by law or to protect legal rights.

Order and eSIM records are kept long term — they are your proof of purchase, and we need them for disputes and tax record-keeping.

Authentication logs are kept for a shorter period, for security auditing only.

You may request account deletion, though completed transaction records must be kept where the law requires.

One strictly necessary cookie keeps you signed in. It is HttpOnly (not readable by JavaScript), SameSite=Lax, and identifies only your session.

We do not use advertising or tracking cookies.

You may ask to access, receive a copy of, correct or delete your personal data, or ask us to stop using it.

We are a US company. Your data may be processed outside your country of residence, including in the United States and wherever our service providers operate.

Email [email protected]. To protect your data we may need to verify your identity first.