The paperwork

Privacy policy.

Last updated October 21, 2026

The short version: we collect what it takes to sell you an eSIM and keep it working, we never see your card number, and we do not sell your data. The detail is below.

1. Who we are

Boring Esim Ltd, registered at 24-26 Regent Place, Birmingham B1 3NJ, United Kingdom, is the controller of your personal data. You can reach us at team@boringesim.com.

2. What we collect

Your email address, which is also how you sign in.
Order and payment metadata via Stripe, our payment provider. Card numbers go straight to Stripe; we never see or store them.
eSIM usage volumes from our carrier partner, so plans can be delivered, kept working and protected from misuse. We see how much data a plan used, not what it was used for.
Support messages you send us.
Basic device diagnostics, such as the device model and app version, so we can tell whether an eSIM will install on your phone, and crash reports if the app crashes.
App events for measuring our ads. The app tells Meta, the company behind Facebook and Instagram, when it is installed and opened, and when a paid order goes through, with the amount, currency and plan. No name, email address or order number goes with it. Meta's software adds its own identifier for this install of the app and device basics such as the model, iOS version, language and time zone, and Meta sees your IP address. We never read your device's advertising identifier and never ask for permission to track you.
Whether an Apple Search Ads campaign led to your download, as Apple reports it to us. This describes the download, not you.

3. Why we use it

To deliver eSIMs and keep plans working, which is the contract between us.
To send receipts and service emails, such as a plan activating or a payout going through.
To prevent fraud and abuse, which is our legitimate interest.
To see which of our ads lead to downloads and purchases, so we spend less showing ads to people who will not want them, which is our legitimate interest. You can object at any time by emailing us.
To meet legal obligations, such as keeping order records for tax law.

4. Marketing

We send marketing email only with your consent, and every marketing email has an unsubscribe link that works on the first click. Service emails, like receipts, are not marketing and arrive regardless.

5. Who processes it

We use a small number of processors, each doing one job:

Stripe, for payments.
Supabase, for our infrastructure and database.
Resend, for sending email.
Telna, for the connectivity behind the eSIMs themselves.
Vercel, for hosting this site.
Google, for crash reports (Firebase Crashlytics) and for Sign in with Google if you choose it.

Each processes data only on our instructions, under a data processing agreement.

Two companies receive data for advertising measurement and decide for themselves how to use it, under their own terms: Meta Platforms Ireland Ltd, for the app events described above (see Meta's privacy policy), and Apple, which tells us which Search Ads campaign led to a download.

6. How long we keep it

Account data stays until you delete your account, in the app or by email. Order records are kept for as long as the law requires, which for UK tax purposes is six years, and are then deleted.

7. Your rights

You can access, correct or delete your personal data, in the app or by emailing team@boringesim.com, and we answer within a month. You can also object to or restrict our processing, and take your data elsewhere in a portable format.

If you are unhappy with how we handle your data, you can complain to the ICO, the UK's data protection regulator, at ico.org.uk.

8. What we never do

We do not sell personal data. Not to advertisers, not to brokers, not to anyone.

9. International transfers

Travel connectivity is international by nature, so some of our processors handle data outside the UK. Where that happens, the transfer is protected by standard safeguards, such as the UK international data transfer agreement or standard contractual clauses.

10. Cookies

This site uses essential cookies and local storage only, for things like remembering a dismissed banner or keeping you signed in to the dashboard. There are no advertising or tracking cookies, which is why there is no cookie banner.

11. Changes and contact

If this policy changes in a way that matters, we tell you in the app or by email. The date at the top is the date of the current version. This policy sits alongside our terms of service, and questions about either go to team@boringesim.com.