Privacy policy

What we store

• A SHA-256 hash of your recovery token, so that presenting the token proves access without us holding the token itself
• Your remaining balance and top-up history, because that is the product
• Aggregated data usage per session, supplied by the network partner, because data must be billed
• A payment reference from the payment processor, used once to match a payment to an order and never joined to an identity
• An email address only if you chose to provide one for delivery or support follow-up

What we do not store

• Names, addresses, identity documents or dates of birth
• Card numbers, which never reach our systems
• Browsing history, DNS queries, message content or call records
• Anything that would let us re-identify an anonymous purchase

Analytics

We record first-party page views and conversion events using a random session key stored in your browser for the duration of the visit. No third-party analytics, no advertising pixels, no cross-site tracking, and no cookies used for profiling.

Retention

Usage records are retained for 90 days for billing reconciliation and then deleted. Balance and top-up records persist while the eSIM is active because the balance does not expire. Analytics events are retained for 12 months in aggregate form.

Law enforcement requests

We comply with valid legal orders in our jurisdiction. In practice we are able to provide almost nothing, because the information requested in such orders is identity data we never collected. We will say so rather than pretend otherwise.

Your rights

You can request deletion of an eSIM record at any time using your recovery token. There is no identity to request access to, which is the intended outcome rather than an oversight. Questions go to help@monerosim.com.