Privacy Policy
Last updated: 15 July 2026 · Data controller: Cosmicbrain LDA, NIF 518191672, Portugal
What we collect
Account data (email, name), order data (plans bought, payment references — we never see your full bank credentials), technical data (eSIM identifiers such as ICCID, data usage totals for your dashboard), and basic analytics (how you found us, e.g. UTM parameters, stored in a 30-day cookie).
Why (legal bases)
To deliver your eSIM and support (contract), to meet accounting/tax obligations (legal obligation), to prevent fraud and improve the service (legitimate interest), and marketing emails only with your consent.
Sharing
Order fulfilment requires sharing minimal technical data with our connectivity provider to provision your eSIM. Infrastructure: our own EU-hosted servers; email delivery via Google Workspace. We never sell personal data.
Retention
Account data until you delete your account; order/invoice data as required by Portuguese tax law (10 years); analytics cookies 30 days.
Your rights (GDPR)
Access, rectification, erasure, portability, restriction, and objection — email [email protected] or call +351 932 288 348. You may lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados).
Cookies
Strictly necessary cookies (session sign-in) and one first-party attribution cookie (30 days). Optional privacy-friendly analytics (Plausible) loads only when enabled — no cookies, no advertising trackers. Google Analytics (GA4) is only enabled if we configure it, and then uses anonymized IP.