Datenschutzrichtlinie

Dies ist die internationale (englische) Datenschutzrichtlinie unseres US-Unternehmens. Die maßgebliche deutsche Fassung nach DSGVO findest du in unserer Datenschutzerklärung.

1. Overview

This policy explains what StrongeSIM LLC, a limited liability company registered in Delaware, United States collects when you use strongesim.com, why we collect it, and the choices you have. The short version: we collect what is needed to sell and deliver eSIMs, we do not sell your personal data, and we never see or store your full card details.

2. What we collect

• Account data: name, email address, password (stored only as a salted cryptographic hash), and optional phone/address if you add them.
• Order data: the plans you buy, prices paid, order identifiers, and the eSIM profile issued to you (QR/activation details).
• Payment data: handled by PayPal or Stripe on the website, and by Stripe in the mobile app. We receive confirmation of payment and basic transaction metadata, never your full card number.
• Mobile app: the StrongESIM app additionally uses Stripe (not PayPal) for in-app card payments, may request permission to save your eSIM QR code to your photos, and can send push notifications for order updates. Push notifications and photo access are optional and controlled by your device permissions.
• Sign-in providers: if you sign in with Google or with Apple, we receive the name and email address that provider releases to us, and a provider account identifier. We never receive your password. Sign in with Apple lets you hide your real address, and a relay address works exactly like any other for us.
• Support messages: if you contact us through the app's Help Centre, we store the subject and message you write, with your email address, and send a copy to our support inbox so we can reply. We only ever return your own tickets to you.
• Push notifications: if you allow them, we store the notification token your device issues, so order updates can reach it. It identifies the installation, not you personally, and is deleted when you turn notifications off or sign out.
• Technical data: IP address and approximate country, browser type, and request logs, used for security (fraud and abuse prevention, rate limiting) and to operate the site.
• Analytics (website only): aggregated usage statistics via Google Analytics 4 on strongesim.com (pages viewed, sessions, country level location). The StrongESIM mobile app contains no analytics, advertising, or crash-reporting SDKs. Neither the site nor the app tracks you across other companies' apps or websites, and we do not use advertising trackers.
• Referral data: if you arrive through an affiliate link, a referral cookie attributes your purchase to that partner (see the Cookie Policy).

3. Why we use it

• To deliver what you bought: issue your eSIM, show it in your account, send order and verification emails.
• To keep the service secure: verify logins with one-time codes, detect payment fraud, block abusive traffic.
• To improve the product through aggregated analytics.
• To send marketing email only where permitted; every marketing email contains a way to opt out, and transactional email is unaffected.
• To comply with legal, tax, and accounting obligations.

4. Who we share it with

• Payment processing: PayPal and Stripe for website payments, and Stripe for mobile-app payments.
• eSIM provisioning: our connectivity platform partner receives the order details needed to issue your eSIM (plan and delivery email).
• Email delivery: our email provider, to send the messages described above.
• Sign-in providers: Google and Apple, only when you choose to sign in with them, and only to verify who you are.
• Analytics: Google Analytics, for aggregated website usage data only. It is not present in the mobile app.
• Authorities, only where the law requires it.

We do not sell personal data, and we do not share it with advertisers.

5. Security

Passwords are stored using the scrypt key-derivation function with per-user salts; session tokens are stored only as hashes; all traffic is encrypted in transit (HTTPS); access to production systems is restricted. No system is perfectly secure, but we take this seriously and audit regularly.

6. Retention

Account and order records are kept while your account exists and as required for tax and accounting. You can remove individual eSIMs from your account at any time.

Deleting your account. In the mobile app, open Profile, then Settings, then Delete Account. That deletes your account and the personal data we are not legally required to keep, without needing to contact us. On the website, or if you would rather we did it for you, email info@strongesim.com and we will remove it. Records we must keep for tax and accounting are retained in the minimum form the law requires.

7. Your rights

Depending on where you live (for example under the GDPR or the California CPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email info@strongesim.com and we will respond within 30 days.

8. Children

The service is not directed at children under 16 and we do not knowingly collect their data.

9. Changes

If we change this policy in a meaningful way we will update the date at the top and, for significant changes, notify account holders by email.