Privacy Policy

Information We Collect

You can use the comparison service without registration. If you purchase a direct eSIM, we collect your email address, order and payment references, plan details, and the identifiers and installation data needed to issue and support the eSIM, including ICCID and activation status. We also receive information you provide when contacting support.

We may collect technical and analytics data such as page views, referral sources, device type, IP-derived information, comparison filters, outbound provider-link actions, and server logs to operate, secure, and improve the service. Analytics events do not include names, email addresses, raw IP addresses, full user-agent strings, ICCIDs, or payment-card information. A random first-party session ID and pseudonymous order ID may be stored to connect comparison, checkout, payment, provisioning, activation, and usage-notification events. Page, device category, country code, locale, filter, official-source, and outbound-link events are stored in our service database for operational reporting.

How We Use Information

We use this information to create and fulfill orders, provide installation and usage status, prevent fraud and duplicate orders, respond to support requests, comply with legal and accounting obligations, and improve the service.

Service Providers

Direct orders may require sharing necessary information with Stripe for payment, Airalo and its connectivity partners for eSIM provisioning, and our hosting, analytics, and email service providers. Card numbers are entered on Stripe's checkout and are not stored by eSIM Scout. Each provider processes data under its own terms and privacy obligations.

We use Cloudflare Web Analytics for page-view and performance measurement, Cloudflare D1 for first-party journey and conversion events, and Vercel hosting logs and Speed Insights for interaction events and web performance. We configure these tools without advertising profiles and limit event fields to the service data needed to understand the comparison and purchase journey.

Processing Outside Japan

Some service providers and connectivity partners may process or store necessary order, device, support, and technical data outside Japan. Depending on the order, this may include the United States, Singapore, and countries where the selected mobile network or its subcontractors operate. We review provider terms and security measures, limit shared data to what is necessary, and use contractual and technical safeguards appropriate to the service. Provider locations and subprocessors may change; contact us for current information relevant to a specific order.

Cookies

We use a random first-party analytics session cookie for up to 30 days to connect events within a visit and across a return visit. It is HTTP-only, same-site, and is not used for cross-site advertising. We do not use analytics data to build advertising profiles.

Affiliate Links

When you click an affiliate link on our site, you will be redirected to a third-party eSIM provider. These providers have their own privacy policies. We recommend reviewing their privacy practices before making a purchase.

API Usage

Our public API (/api/v1/) does not collect or store any personal data from API consumers.

Data Retention

We retain order, support, and transaction records only as long as needed to provide the service, handle disputes and refunds, prevent abuse, and meet legal or accounting requirements. First-party journey events are automatically deleted after 25 months. Pseudonymous conversion records may be retained for up to seven years where needed for transaction reconciliation, accounting, fraud prevention, and legal claims. Retention periods may differ for records held by service providers under their own obligations.

Your Requests

You may contact us to request access, correction, or deletion of personal information, subject to identity verification and records we must retain by law.

Contact

For privacy-related inquiries, contact us at support@esim.instrial.com.