Privacy Policy

To buy from BuyUKeSIM you never give us, and we never store:

• Your name
• Your home or billing address
• Any government ID, passport, or KYC document
• A credit or debit card, or bank details
• An account or password - there are no accounts
• A required email address

Only what is strictly needed to take a crypto payment and deliver a digital eSIM:

• Order details. The product you bought, the crypto amount, payment status, and a lookup code so you can find the order later.
• eSIM identifiers. The QR and ICCID of the eSIM we assign to you, so we can deliver it and help if activation fails.
• Country signal. A coarse country (from Cloudflare), stored with your order and in our own server-side statistics. We use it to see where orders and visits come from, to spot a coverage problem in a country, and to credit an affiliate referral. Not a precise location, and it never changes the price you pay.
• Optional email. Only if you choose to enter one, at checkout or later from your own order page. We email you only about your own order: the link to your eSIM, the expiry reminders you switched on yourself, and one notice if an order expired before you paid. Every one of them carries an unsubscribe link, and the address is never sold, shared, or used to sell you something you did not order. An address you add from your order page is deleted the moment you switch the reminder off there.
• Support messages. If you use live chat or the Telegram bot, the messages you send and a random visitor id so we can reply. No account is created. Live chat is answered first by an AI assistant, which means the recent messages of that conversation are sent to our AI provider to compose a reply - see the table below.

Our analytics are first-party and self-hosted: no Google, no third-party analytics product, no advertising network. Here is exactly how they work, because "privacy-friendly analytics" is a phrase that hides a lot. Every public page runs a small beacon that pings our server about every 50 seconds with the page you are on, the page you came from, and a random id your browser generates and keeps in local storage. Our server records that ping together with the IP address it arrives from and your browser’s user agent string. The reporting we actually look at is built from a one-way hash of those two that is rebuilt every day, so the charts hold no IP address and no user agent; the raw pair sits in the live visitor table, which is deleted two days after your last page view. None of it is shared with an analytics company, and none of it builds a profile that follows you off this site.

• Send newsletters, promotions, or offers for anything you did not order
• Sell, rent, or share your data with data brokers or advertisers
• Build advertising or behavioural profiles of you
• Place third-party advertising pixels or cross-site trackers
• Ask you to verify your identity to buy

Checkout is cryptocurrency only. You pay directly in crypto, confirmed on the blockchain - there is no card form and no bank transfer, so no card or bank data exists to leak. We read only the on-chain payment status to release your eSIM.

We use a small number of essential cookies to run checkout. There are no analytics cookies, no advertising cookies, and no ad, social-media or analytics pixels on the site. Two other things live in your browser rather than in a cookie: a random visit id in local storage, shared by the beacon and the chat widget so a reply reaches the right browser, and, if you arrive through a partner link, a first-party cookie holding that partner’s referral code for 90 days so we can pay them for the sale. Neither holds anything about you, and clearing site data clears both.

Real windows, taken from the cleanup job that enforces them. It runs hourly. Where a store has no deletion date we say so, rather than writing "as long as necessary".

We hold no accounts, no identity documents and no payment credentials, so most of what a shop would normally retain never exists here in the first place.

A few processors are needed to run the service. Each sees only what its job requires, and this is the whole list:

We do not control how these providers handle data. Several processors are described by what they do rather than by name: the provider behind our live chat assistant, the service that sends our email, the crypto payment gateways, the network supplier that issues eSIM profiles, and the VPN operator we buy capacity from. None of them is a company you have a relationship with.

The VPN is capacity we buy on a wholesale network rather than servers we own. When you buy a plan we send that network a generated username, a generated password and an expiry date, and nothing about you: no email, no order id, no payment detail, no IP address. Your traffic then leaves through their servers, which run from RAM and are operated on the terms we publish on the VPN page: source IP addresses and connection timestamps are not stored. We hold the operator to that; we cannot audit it for you, so treat it as their commitment carried by us, not a claim we can prove on their behalf.

For readers who want to reach us anonymously, BuyUKeSIM is also available as a Tor hidden service. Open it in Tor Browser at l4wvrny7rzf7ec2cmp7w4frl6okcvxmq662zrbhe7v3pvxplcuzf2gyd.onion. We publish a warrant canary as well.

Depending on where you live, you may have rights to access, correct, or delete personal data (for example under the GDPR or CCPA). You are welcome to ask - though because we collect so little, a request will usually turn up very little. Contact us using the details below.

The site is served only over HTTPS. We never take or store card or bank data - payments settle directly on the blockchain in cryptocurrency - and the deliberate lack of accounts and identity documents means a breach has very little to expose.

This policy says what we collect. The threat model says what every other party can see, and names what we cannot protect at all.

Read the privacy model

BuyUKeSIM is intended for adults (18+, or the age of majority where you live). We do not knowingly sell to or collect data from children.

If this policy changes, we update the date at the top and post the revised version here. Questions about privacy? Reach us on Telegram at @buyukesimbot or via the contact page.