Privacy Policy
What we collect
To deliver your eSIM, ToucanSim collects your email address and order details (plan, destination, price, timestamps). Payments are processed by Stripe — we never see or store your full card details.
Site analytics
ToucanSim measures how the site is used, on our own servers. We record the pages you view, the approximate location your visit came from (country, region and city, derived from your IP address), your device type, the site that referred you, and which elements you click, including where on the page you clicked.
We do not store your IP address. It is used in memory to look up an approximate location and then discarded. To count repeat visits within a day we store a one-way hash of your IP address and browser, salted with a secret that changes every 24 hours — so the identifier cannot be reversed, and cannot be linked to you across days.
This measurement runs on our own servers, uses no third-party analytics service, and sets no cookies. Nothing measured here is sold or shared. Analytics records are deleted automatically after 90 days. Advertising measurement is separate and is described below.
Approximate locations are derived using the DB-IP IP-to-City Lite database, which runs on our own server — your IP address is never sent to a third party to resolve it.
Advertising
ToucanSim advertises on Facebook and Instagram. To tell whether those ads actually lead to sales, the site loads the Meta Pixel, which reports to Meta Platforms when you open a page, look at a destination’s plans, start a checkout, or complete a purchase. Those reports include the page address, your browser and device type, your IP address, and — for a purchase — the plan bought and the amount paid. They do not include your email address or anything about your payment method.
The pixel stores a cookie in your browser (_fbp) so that Meta can recognise a later visit. Meta uses what it receives under its own privacy policy, including to build advertising audiences, and we cannot control what it does with that data once it has been sent.
If your browser sends a Do Not Track signal, the pixel is never loaded and nothing is sent to Meta — the same promise our own analytics makes. You can also block it with most ad- or tracker-blocking extensions, or change what Meta does with it from your Meta ad settings. Blocking it has no effect on your order, your eSIM, or support.
How we use it
- To provision your eSIM with our wholesale carrier partner.
- To email you the eSIM QR code and activation instructions.
- To provide customer support and process refunds.
- To understand which destinations and plans people look for, and which parts of the site are confusing, so we can improve them.
We do not sell personal data or send marketing email without consent.
Third parties
Order data is shared only with the parties needed to deliver the service: our payment processor (Stripe) and the eSIM provisioning partner. Separately, the advertising measurement described above sends page and purchase events to Meta. Each processes data under their own privacy policies.
Retention
Order records are retained for accounting and support purposes. You may request deletion of your personal data by contacting us; we may retain records we are legally required to keep.
Contact
Privacy questions or requests: open a support request.