Privacy Policy

In effect from 2026-11-08

This policy explains what personal data SIMAREA, the service at simarea.com (“we”), collects, why, who we share it with and for how long, and the rights you have. It applies to the website, the API and our emails. We decide how this data is used, and you can reach us about it at [email protected].

1. What we collect

Account data: your email address and, if you sign in with Google, your Google account ID and name. We do not use passwords: you sign in with Google or with a one-time code we email you.
Billing data: your Balance and its history, top-up amounts and status, and payment references from our payment partner, such as a crypto transaction ID. We do not receive or store card numbers.
Order data: what you bought and when; for numbers, the phone number assigned to you and the SMS messages it receives (sender and text); for eSIMs, the eSIM identifier (ICCID), installation details and data usage.
Reward data: who referred you or whom you referred, rewards earned, and the USDT (TRC-20) wallet address you give us for a withdrawal.
Technical data: IP address, browser and device type, sign-in sessions, and security logs. We use these to keep your account secure and to stop abuse.
Usage data: which pages you visit and how you use them (clicks, scrolling, mouse movement and the site you came from), collected with Yandex Metrica, which can also record a replay of your visit (Webvisor). Sign-in, account and order windows are masked in these replays, so they do not show your email, codes, numbers, SMS or eSIM details.
Messages to us: what you write when you contact support.

2. How we use it, and why we may

To provide what you buy (performance of our contract with you): opening your account, delivering eSIMs and numbers, showing you received SMS, handling top-ups, refunds and rewards, and answering support.
To understand how the site is used and improve it (our legitimate interest): counting visits and finding where pages confuse people, with Yandex Metrica.
To keep the service safe (our legitimate interest): preventing fraud, abuse and attacks, limiting sign-in attempts, and enforcing our terms.
To meet legal duties: keeping accounting records and answering lawful requests from authorities.
To email you about your account, such as sign-in codes and order updates. We send marketing only if you agree to it, and you can opt out at any time.

We do not sell your personal data, and we do not use it for advertising profiles.

3. Who we share it with

Only what each needs to do its job:

Connectivity suppliers who provide the eSIMs and numbers you buy: mobile network operators and telecom partners. They see the order and the number, and SMS sent to it pass through them.
Payment partner: OxaPay processes crypto top-ups and sees the payment you make, and card payment providers will when card payments are offered.
Service providers: Google (sign-in with Google), Resend (sending our emails), Cloudflare (network delivery and security), Yandex (Yandex Metrica web analytics), and our hosting provider netcup (servers in Germany).
Authorities, when the law requires it, and professional advisers bound by confidentiality.
A buyer of our business, if SIMAREA is ever sold, under this policy.

4. International transfers

Some of the providers above process data outside your country, including outside the European Economic Area and the UK. We choose providers that protect personal data and share only what each needs. Yandex processes the Yandex Metrica data, including in Russia.

5. How long we keep it

Account, order, SMS and Balance records: while your account is open. After it is closed we delete or anonymise them, except records we must keep for accounting and tax, which we keep for the period the law requires.
Sign-in sessions: 30 days from your last activity, then deleted within a week.
Email sign-in codes: valid for 10 minutes, deleted within a week after they expire.
The raw content of notifications from our payment and number partners: 30 days.
Support messages: as long as needed to resolve your request and any follow-up.

6. Your rights

Depending on where you live, you can ask us to:

give you a copy of your personal data (access and portability);
correct it (rectification);
delete it (erasure), except what we must keep by law;
limit or stop how we use it (restriction and objection, including always to direct marketing);
withdraw a consent you gave, at any time.

Write to [email protected] from the email address on your account. We answer within one month. You can also complain to the data protection authority where you live.

7. Security

We protect your data with encryption in transit, access controls and hashing of sign-in secrets: we never store your sign-in codes, session tokens or API keys in readable form. No system is perfectly secure, and we will tell you without undue delay if a breach puts your data at risk.

8. Cookies

The site needs these cookies to work:

a sign-in cookie that keeps you signed in, for up to 30 days;
short-lived cookies that secure sign-in with Google and remember a referral link you arrived from, for a few minutes;
a cookie that remembers the display currency you picked.

We also use Yandex Metrica to understand how the site is used. It sets its own cookies (their names start with _ym) for up to one year, and records page visits, clicks, scrolling and mouse movement, including replays of visits (Webvisor). Sign-in, account and order windows are masked in those replays. You can block these cookies in your browser settings or with the Yandex Metrica opt-out add-on.

Your light or dark theme choice is stored in your browser and never sent to us. We do not use advertising cookies.

9. Children

SIMAREA is not for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

10. Changes

We will update this policy when what we do changes, and tell you by email or on the site when a change is significant.

11. Contact

Questions or requests about your data: [email protected].