Privacy Policy

Last updated: 15 July 2026 · Data controller: Cosmicbrain LDA, NIF 518191672, Portugal

What we collect

Account data (email, name), order data (plans bought, payment references — we never see your full bank credentials), technical data (eSIM identifiers such as ICCID, data usage totals for your dashboard), and basic analytics (how you found us, e.g. UTM parameters, stored in a 30-day cookie).

Why (legal bases)

To deliver your eSIM and support (contract), to meet accounting/tax obligations (legal obligation), to prevent fraud and improve the service (legitimate interest), and marketing emails only with your consent.

Sharing

Order fulfilment requires sharing minimal technical data with our connectivity provider to provision your eSIM. Infrastructure: our own EU-hosted servers; email delivery via Google Workspace. We never sell personal data.

Retention

Account data until you delete your account; order/invoice data as required by Portuguese tax law (10 years); analytics cookies 30 days.

Your rights (GDPR)

Access, rectification, erasure, portability, restriction, and objection — email [email protected] or call +351 932 288 348. You may lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados).

Cookies

Strictly necessary cookies (session sign-in) and one first-party attribution cookie (30 days). Optional privacy-friendly analytics (Plausible) loads only when enabled — no cookies, no advertising trackers. Google Analytics (GA4) is only enabled if we configure it, and then uses anonymized IP.