Legal

Privacy Policy

What we collect, which outside services run on this site, and the choices you have. Last updated: 4 October 2026

Who is responsible

SwipSIM is the data controller for the personal data described here. Privacy questions and data requests go to support@swipsim.com.

What we collect to sell you an eSIM

  • Account data: your email address and, if you create one, your account profile.
  • Order data: the plan purchased, amount, currency, order status and the eSIM identifiers needed to support your order.
  • Payment data: handled by our payment provider (Whop). We receive a payment reference and status — never your card number.
  • Technical data: server logs needed to run and secure the service, including hashed IP and session identifiers used to block fraudulent checkout attempts. Activation codes and eSIM identifiers are redacted from logs.

What we do not collect

We do not see or record your browsing, messages or location while you use a data plan. That traffic is carried by mobile operators, not by us.

Analytics, advertising and session-recording tools

The site loads the following third-party tools. They set cookies or similar identifiers in your browser and send data about your visit to the provider.

  • Google Analytics 4 (Google Ireland Ltd / Google LLC) — measures visits and usage: pages viewed, referrer, device, browser, approximate location from your IP address, and events such as completed purchases (order number, amount, currency). Sets cookies such as _ga and _ga_* that last up to 2 years.
  • Google Ads conversion tracking (AW-18476423844, Google) — tells us which ad clicks led to a visit or purchase, and may let Google build audiences for ads. Uses cookies such as _gcl_au and Google advertising cookies (up to 90 days or more).
  • Microsoft Clarity (Microsoft Corp.) — records anonymised session replays, clicks, scrolls and mouse movement and builds heatmaps so we can fix usability problems. Form inputs are masked. Sets cookies such as _clck and _clsk (up to 1 year).
  • Cloudflare Web Analytics (Cloudflare, Inc.) — counts page views and page-load performance. It does not use cookies or build a profile of you; it processes your IP address and browser details transiently.

Strictly necessary storage

We also store your language and display-currency preference, the session token that keeps you signed in, and — if you arrived through a partner link — a referral cookie (see below). These are needed for the site to work.

Legal basis and international transfers

Order, account and payment data are processed to perform our contract with you. Fraud prevention relies on our legitimate interest. Analytics, advertising and session-recording tools should rely on your consent where the law requires it, including in the EU, EEA, UK and Switzerland.

Google, Microsoft and Cloudflare may process data in the United States under the EU–US Data Privacy Framework and standard contractual clauses.

Your choices

  • In the EU, EEA, UK and Switzerland these tools load only after you click Accept on our cookie banner. Change or withdraw your choice anytime via "Cookie settings" in the footer; we keep a record of each choice (a random ID, the choice, the date and the notice version).
  • Block or delete cookies in your browser settings at any time.
  • Opt out of Google Analytics with Google's browser add-on: tools.google.com/dlpage/gaoptout.
  • Control personalised Google ads at adssettings.google.com.
  • Ask us to delete data linked to your orders by emailing support@swipsim.com.

Referral and affiliate links

If you reach us through a partner referral link (swipsim.com/r/CODE), we store the referral code in a cookie for 30 days so the partner is credited if you buy, and log the code, landing page and referring site.

Partners never see your name, email, order contents or eSIM usage — only aggregate figures. Commission payouts are handled by Whop.

Sharing

We share the minimum necessary data with our eSIM wholesale supplier (to issue your profile), our payment provider, our hosting and database provider, and the analytics and advertising providers listed above. We do not sell personal data.

Retention

Order and billing records are kept as long as accounting and tax law requires. Analytics data is kept for 14 months in Google Analytics and up to 13 months in Microsoft Clarity.

Your rights

You can request access, correction, deletion or a copy of your data, object to processing, withdraw consent, or complain to your data protection authority (in France, the CNIL). Email support@swipsim.com; we respond within 30 days.