Privacy policy

Who we are

Globalesim operates Globalesim (the “service”) and is the controller of the personal data described here. Our address is New York. USA. Contact us at info@globalesim.si.

What we collect and why

• Account: a public cryptographic key derived on your device from your recovery phrase, an account ID, and optionally passkey public keys. We never receive or store your recovery phrase or private keys. Purpose: to provide your account (contract).
• Sessions and security: session records with a device description (e.g. “Chrome on iOS”), a shortened IP address prefix and sign-in events. Purpose: keeping your account secure and preventing abuse (legitimate interests).
• Orders and payments: what you bought, prices, payment status and references from our payment processors. We do not receive your full card details. Purpose: delivering your purchase and meeting accounting and tax obligations (contract, legal obligation).
• eSIM data: eSIM identifiers and activation details (stored encrypted), installation status and data usage reported by our network provider. Purpose: delivering and supporting your eSIM (contract).
• Preferences: language, currency and recently viewed destinations.

Cookies

We only use cookies needed for the service to work: your sign-in session, short-lived security cookies used during sign-in, and preference cookies (language, currency, recently viewed destinations). We do not use advertising or third-party tracking cookies, and our sign-in pages load no third-party scripts.

Who we share data with

We share data only with service providers that help us run the service, under contracts that protect your data:

• Stripe (card payments) and NOWPayments (cryptocurrency payments), when you choose those methods;
• eSIM Go, our mobile network partner, to issue and manage your eSIM;
• our hosting and database providers.

Some providers may process data outside the EU/EEA; where they do, appropriate safeguards such as standard contractual clauses apply.

How long we keep data

We keep account and eSIM data while your account is active. Financial records are kept for as long as accounting and tax laws require. Security logs are kept for a limited period. Expired sign-in challenges and rate-limit counters are deleted automatically.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to complain to a data protection authority. Because accounts have no email address, we may ask you to make requests while signed in, or to quote your account ID and an order reference, so that we can verify the request comes from you.

Security

Activation data and eSIM identifiers are encrypted at rest, sessions are protected with secure cookies, and access to administrative tools is restricted and logged. See our FAQ for how your recovery phrase protects your account.

Changes

We'll update this page when our practices change and show the date of the latest update above.