Privacy Policy
Last updated August 7, 2026
What this site collects, why, who else sees it, and what it does not collect. Short — because the store is not open, and there is very little to collect yet.
This store is not open yet.
Everything here is still being prepared. No payment provider is connected — the only checkout method installed is a simulated test gateway, so no card can be charged and no money moves. The link to our eSIM supplier is in test mode as well, which means an order placed today does not produce a working eSIM.
The operator of this store is not registered as a company yet. Rather than print a name and an address that do not exist, this page says so. The registered name, number and address will appear here, and in the footer, before the store accepts a single real payment.
Who is responsible for your data
The operator of this store. That operator is not registered as a company yet, so this page cannot name a data controller, a registered address, or a data-protection contact.
The gap is stated on purpose. An invented company name on a privacy policy is worse than an admitted gap — it is the one document where a reader is entitled to assume every word is checkable. The details will be published here, and in the footer, before the store accepts real payments.
What is collected, and why
- Your email address — so the eSIM can be sent to you and order emails have somewhere to go. This is the one piece of data the store genuinely cannot work without.
- Your name and billing address — the checkout asks for them because WooCommerce requires a billing address before it will create an order.
- Account details, if you create an account — your email and a password. The password is stored as a one-way hash and is never held in readable form.
- Order records — what was bought, when, for how much, and the identifiers of any eSIM line issued against it.
- Server logs — the web server records requests: IP address, time, page, browser string. Operational records, the same as any web server keeps. They are not used to build a profile of you.
What is not collected
- No third-party analytics and no advertising. This site loads no analytics service, no tag manager and no advertising pixel. Every asset a page loads — script, stylesheet, font and image — comes from this site’s own domain.
- No record of how you arrived. The shop software is able to keep track of the site that referred you, the campaign parameters in a link and the first page you landed on, and to attach that to your order. That feature is switched off, so none of it is recorded.
- No card details. There is no card processor connected, so no card data reaches this site. When a processor is installed, card data will go straight to it and never touch this site’s database — and this page will name it before that happens.
- No profiling, no ad targeting, no data sold or shared for marketing. There is no mailing list to be added to.
Cookies
Reading this site sets no cookies at all. Nothing is stored on your device until you put a plan in the basket or sign in.
All of them are set by this site itself. No third party can read any of them.
- Two basket cookies — woocommerce_cart_hash and woocommerce_items_in_cart — are added the first time you put a plan in the basket, so the basket survives a page load. Both disappear when you close the browser.
- One session cookie, wp_woocommerce_session_ followed by a string of letters and numbers, is added at the same moment. It is how the server recognises your basket from one page to the next. It holds no personal detail, cannot be read by any script in the page, and expires by itself after two days.
- Sign-in cookies (names beginning wordpress_) are added when you sign in, and are what keeps you signed in. If you never sign in, they are never set. How long they stay depends on the “Remember me” box on the sign-in form: leave it unticked and they disappear when you close the browser; tick it and they stay on your device for about two weeks.
- Nothing else. No advertising network, no analytics service and no social widget sets anything here, because none of them are loaded.
Every one of those is needed to do the thing you asked for — hold a basket, keep you signed in — so there is nothing here to ask your consent for, and you will not be shown a cookie banner. That is a description of how the site is built today, not a permanent promise: if analytics or advertising are ever added, the consent request comes back with them, and this page changes first.
One piece of housekeeping, for completeness rather than because it affects you. Until 6 August 2026 the shop software also set seven cookies with names beginning sbjs_, which recorded how a visitor arrived. That feature is switched off, and none of those cookies outlived the visit: six ended when you closed the browser, and the seventh expired half an hour after your last page view. If you were here before that date they are already gone.
Who else sees your data
Your name, your email address and your billing address are never sent to the eSIM supplier.
- The eSIM supplier. To create a line we send exactly three values: which plan, how much data, and how many days. Nothing that identifies you is in that request.
- The hosting provider. The site and its database run on a rented server, and the provider can technically reach that machine — as is true of any hosted site.
- Email delivery — Amazon SES (Amazon Web Services). Order and eSIM emails leave this site through Amazon’s email service, sent from info@esimstore.r-s.space and handed to Amazon’s EU (Ireland) endpoint. Amazon handles whatever an email contains: for an order email that is your name, the billing address you entered and what you bought; for a delivery email it is also your eSIM’s QR code and its activation code. It receives nothing about you beyond the messages themselves.
That is the whole list. There is no fourth party.
How long it is kept
- Order records — kept for as long as the store needs them to answer questions about a past order, and because sales records generally have to be retained. Once the operator is registered, this line will state the exact period its jurisdiction requires instead of describing it.
- Account details — kept until the account is deleted.
- Server logs — rotated on the hosting provider’s schedule.
Your rights
You can ask what is held about you, ask for it to be corrected, ask for a copy of it, and ask for it to be deleted.
There is no request channel to send that to yet — see below. The store is not open, so the only order data on this site belongs to our own test orders.
Changes to this document
This policy will change as the store is built out — a payment processor and an email provider are both still to be named. The date at the top is the date of the last change; the same applies to the Terms of Service.
How to reach us
There is no support channel yet — no monitored mailbox, no phone line, no chat. Publishing an address that nobody reads would be one more promise this store cannot keep, so there is none to publish.
The pages that would otherwise invite you to contact us — the destination FAQs and the eSIM guide — say the same thing and link here, rather than offering a route that goes nowhere.
A contact route will be published together with the operator’s registered details, before the first real payment is accepted.