Jumbo plane mark JumboSIM
Privacy Policy

An email address and an order

Selling you a plan means holding some real data. This page lists exactly what, who else touches it, how long we keep it, and what our supplier is never told.

Last updated · 2026-08-28

01The short version

  • Browsing tells us nothing about you. No account, no sign-up, no newsletter, no analytics, no advertising or social trackers.
  • jumbosim.io sets no cookies and stores nothing in your browser.
  • Buying collects an email address — we need somewhere to deliver the plan — plus a record of the order itself.
  • We never see your card number. Stripe handles payment on its own page.
  • Our eSIM supplier is told nothing about you. Not your email, not your name, not where you are.
  • Nothing is sold, shared for advertising, or used to profile you.

02Browsing the site

There is no login, no profile and no waiting list. You can read every price and every country without telling us anything.

The coverage board is one request to our own endpoint on this domain, which returns the whole catalogue — countries, plans and prices — already reduced and cached. Searching a destination, opening a country and comparing plans all happen inside your browser against data already delivered. Your searching is not transmitted anywhere, so nobody, us included, learns which country you were looking at.

03What buying collects

Buying a plan creates one order record. It holds:

  • Your email address, as given to Stripe at checkout — the delivery address for the product.
  • The plan you bought and the price you paid, in the currency you paid it.
  • The country your payment came from, which Stripe reports to us, because sales-tax rules depend on it.
  • The eSIM itself: our order reference, our supplier's order reference, the profile's ICCID, and the activation code.
  • Timestamps and a short history of what happened to the order, and a note of which emails were sent, so a retry cannot send the same one twice.

We do not ask for your name, your postal address or your phone number, and there is no field to put them in. Your card number never reaches us.

04Who else touches it

Four processors, each doing one job, and one of them doing a second:

  • Stripe takes the payment on its own checkout page, and passes back to us your email address, the amount, and the payment country. Your card details are Stripe's to handle under Stripe's privacy policy; we never receive them.
  • Our eSIM supplier issues the profile. That request carries a plan code and our own order reference and nothing about you — they are not told who bought it, or that any particular person exists.
  • Our email provider delivers your activation email, and so necessarily handles your address and the message.
  • Cloudflare hosts the site and the order database. Like any host it processes the technical details of a request — IP address, user-agent, URL, timestamp — to serve pages and defend against abuse. We do not use that to build a profile of anyone.
  • Cloudflare Turnstile runs on the plan pages. Before a checkout starts it confirms that a browser is asking and not a script, by reading signals from your browser and device. That is Cloudflare's to handle under Cloudflare's privacy policy; what reaches us is a yes or a no. It sets no cookie.

To stop stolen cards being tried against the shop, we also count how many checkouts each network address starts. The count is kept against a one-way code derived from the address, never the address itself, and is deleted within a day.

Nobody else. We run no advertising network, no retargeting and no data brokerage, and we do not sell or share customer data.

05Cookies and tracking

jumbosim.io sets no cookies, uses no local storage, runs no analytics package, and loads no third-party advertising or social scripts. There is nothing to consent to, which is why you are not shown a cookie banner.

The plan pages load one script from outside this site: Cloudflare Turnstile, the security check described above. It sets no cookie.

Stripe's checkout page is Stripe's own site and sets what Stripe needs to take a payment securely. The Cookie Policy says all of this at more length.

06How long we keep it

Order records: seven years. A sale creates tax and accounting obligations that outlast the trip, and the retention period follows those rather than our preference. Your order page keeps working for that time, which is also why the activation code stays in the record — it is the product you paid for.

Email correspondence: no longer than we need to deal with what you raised.

We keep no marketing list, so there is nothing to unsubscribe from.

07If you contact us

Using our contact form means we receive the email address you give us, your message, and anything you choose to put in it — usually an order reference and which phone you are using. The form also records the country the request came from, which the network reports, and which tells us which local operator you would be on.

We use it to answer you: no mailing list, no marketing, no sharing or selling. The form does not create an account and sets no cookie.

08Your rights

Privacy law gives you rights over personal data we hold about you: to access it, to have it corrected, to have it deleted, to receive a copy, and to object to how it is used. Ask at our contact form and we will act on it.

One honest limit: where tax law requires us to keep a record of a sale, we cannot delete that record on request. We can and will delete everything not required to keep it, and we will tell you exactly what we did.

09Children

JumboSIM is a travel service for adults arranging their own connectivity. It is not directed at children and we do not knowingly collect personal information from them. If you believe a child has bought a plan, email us and we will refund it and delete the record.

10Changes and contact

If what we do with data changes, this page changes with it and the date at the top moves. We would rather tell you in advance than quietly widen a policy after the fact. Questions, or to exercise any right above: our contact form.

The data controller is Deep Fried Mobile Inc..