Cookie & GDPR Policy

Cookies are small pieces of data stored in your browser. We use a minimal set of strictly-necessary storage to keep the app working, plus one optional analytics cookie that is only set if you accept it. No advertising cookies, no cross-site tracking, and nothing is sold or shared with advertisers.

The following data is stored locally in your browser:

Everything above except the last row is strictly necessary: without it you cannot stay signed in, keep a cart or see prices in your currency. The analytics cookie is the only optional one, and the only one we ask about.

We use a small number of third-party services to operate the site. None of them receive your data for advertising purposes — Google Analytics runs with its advertising features switched off.

• Stripe — handles payment processing securely; we never see your card details. Stripe's script loads with the site and sets its own cookies for fraud prevention, on any page, not only at checkout. See Stripe's cookie policy.
• Authentication & database — our backend infrastructure is hosted in the EU and is GDPR-compliant.
• eSIM network — your purchase details are shared only with our network provider to the extent necessary to deliver your eSIM.
• Google Analytics 4 (Google Ireland Ltd) — measures how the site is used: pages viewed, searches, plans added to a basket, where a checkout was abandoned, and completed orders. For an order it receives the plan, the amount in pounds and the payment reference — never your name, your email address or anything about your card. Advertising features, ad personalisation and Google Signals are off, and IP addresses are truncated. Until you accept the analytics cookie it runs in Google's cookieless consent mode: it stores nothing in your browser and cannot recognise you on a later visit. Completed orders are recorded server-side, without cookies: our server reports each paid order to Google Analytics itself, so it is counted whatever you chose, and nothing is stored on or read from your device to do it. If you declined the cookie, that record carries a one-off random identifier rather than yours. See Google's privacy policy.
• Trustpilot — the account dashboard shows a Trustpilot review invitation, loaded from trustpilot.com, to customers whose eSIM has been used. It appears nowhere else on the site and is there for reviews only; Trustpilot's own privacy and cookie policies apply to it.

If you are in the UK or EEA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Object to or restrict processing
• Data portability

To exercise any of these rights, email privacy@esimsalabim.com. We respond within 30 days.

Order records (including your email and eSIM details) are retained for 7 years for accounting and legal compliance. Auth sessions are deleted when you sign out or delete your account.

We ask about the analytics cookie once, on your first visit, and remember your answer. Declining changes nothing about how the site works. To change your mind, use Cookie settings at the bottom of any page. Everything else we store is strictly necessary and cannot be switched off without breaking sign-in, your cart or your currency — you can clear it at any time in your browser settings, which will sign you out.

Data protection queries: privacy@esimsalabim.com. Data controller: N7Labs Limited, 82A James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom.