The paperwork
Privacy policy.
Last updated September 1, 2026
The short version: we collect what it takes to sell you an eSIM and keep it working, we never see your card number, and we do not sell your data. The detail is below.
1. Who we are
Boring Esim Ltd, registered at 24-26 Regent Place, Birmingham B1 3NJ, United Kingdom, is the controller of your personal data. You can reach us at team@boringesim.com.
2. What we collect
- Your email address, which is also how you sign in.
- Order and payment metadata via Stripe, our payment provider. Card numbers go straight to Stripe; we never see or store them.
- eSIM usage volumes from our carrier partner, so plans can be delivered and metered. We see how much data a plan used, not what it was used for.
- Support messages you send us.
- Basic device diagnostics, such as the device model and app version, so we can tell whether an eSIM will install on your phone.
3. Why we use it
- To deliver eSIMs and keep plans working, which is the contract between us.
- To send receipts and service emails, such as a plan activating or a payout going through.
- To prevent fraud and abuse, which is our legitimate interest.
- To meet legal obligations, such as keeping order records for tax law.
4. Marketing
We send marketing email only with your consent, and every marketing email has an unsubscribe link that works on the first click. Service emails, like receipts, are not marketing and arrive regardless.
5. Who processes it
We use a small number of processors, each doing one job:
- Stripe, for payments.
- Supabase, for our infrastructure and database.
- Resend, for sending email.
- Telna, for the connectivity behind the eSIMs themselves.
- Vercel, for hosting this site.
Each processes data only on our instructions, under a data processing agreement.
6. How long we keep it
Account data stays until you delete your account, in the app or by email. Order records are kept for as long as the law requires, which for UK tax purposes is six years, and are then deleted.
7. Your rights
You can access, correct or delete your personal data, in the app or by emailing team@boringesim.com, and we answer within a month. You can also object to or restrict our processing, and take your data elsewhere in a portable format.
If you are unhappy with how we handle your data, you can complain to the ICO, the UK's data protection regulator, at ico.org.uk.
8. What we never do
We do not sell personal data. Not to advertisers, not to brokers, not to anyone.
9. International transfers
Travel connectivity is international by nature, so some of our processors handle data outside the UK. Where that happens, the transfer is protected by standard safeguards, such as the UK international data transfer agreement or standard contractual clauses.
10. Cookies
This site uses essential cookies and local storage only, for things like remembering a dismissed banner or keeping you signed in to the dashboard. There are no advertising or tracking cookies, which is why there is no cookie banner.
11. Changes and contact
If this policy changes in a way that matters, we tell you in the app or by email. The date at the top is the date of the current version. This policy sits alongside our terms of service, and questions about either go to team@boringesim.com.