Privacy Policy
Last updated 2 September 2026
What we collect, how long we keep it, and who else sees it. The honest summary: less than almost any service you've signed up to, because the account model doesn't need it.
1. The short version
We collect as little as running the service allows. There is no email address on your account, no password, and no name — registering creates a key and nothing else.
We do not sell your data, we do not share it for advertising, and we do not build a profile of you. What we hold exists because the service cannot work without it, or because we are legally required to keep it.
2. What we collect
Your account record holds five things: an internal identifier, a short hint of your key for display, the account's status, a language preference, and the date it was created. That is the whole record.
The key hint is a fragment — the first few characters and the last four — so you can tell one account from another. It is not enough to sign in with.
Alongside that we hold what the service produces as you use it:
- your balance, and the history of how it changed
- the eSIMs you own, their status, and how much data they have used
- your purchases and the plans they relate to
- deposits you make, including the blockchain address generated for each one
We do not collect your name, postal address, date of birth, or phone number. We never ask for them.
3. Your key
Your login key is never stored in a form we can read. We keep a hash of it, computed with a secret held on our servers, which lets us check a key you present without knowing what it is.
This means we cannot tell you your key, email it to you, or recover it if you lose it. It also means a breach of our database does not hand anyone your account.
4. Payments
Card and crypto payments are processed by a third-party payment provider. They receive what they need to take the payment; they do not receive your DeSIM account details.
For crypto deposits we store the address generated for the payment, the asset and network, the expected and received amounts, and the confirmation count. Blockchain transactions are public by nature — that is a property of the networks, not something we control or add to.
We do not store card numbers. We never see them.
6. How long we keep things
Operational logs — webhook deliveries, background job records and idempotency keys — are deleted after 30 days.
An account that is never funded and goes unused is deleted after 30 days of inactivity. Signing in before then keeps it.
Financial records — your balance history, purchases and orders — are kept for as long as we are required to keep them. These are not deleted on a timer, and are not removed when you close your account. That is a legal obligation rather than a choice.
eSIM records are kept while the eSIM exists and for a period afterwards, so support requests about a past trip can still be answered.
7. Your rights
Depending on where you live, you may have the right to ask for a copy of the data we hold about you, to have it corrected, to have it deleted, or to object to how we use it.
There is a practical limit worth naming: because accounts have no email address, we can only act on a request from someone who can prove they hold the account key. We cannot verify your identity any other way, and we will not act on a request we cannot verify.
You can close your account yourself from settings at any time. Financial records survive that, as described above.
To make a request, write to support@desim.cc.
8. Security
We encrypt traffic in transit and restrict access to your data so one account cannot read another's.
No system is perfectly secure. The best protection here is the one you control: keep your key private, and rotate it if you think someone else has seen it.
9. Children
The service is not intended for children, and we do not knowingly collect data from them. If you believe a child has created an account, write to support@desim.cc and we will remove it.
10. Changes and contact
We may update this policy. The date at the top of the page shows when it last changed, and material changes will be reflected there before they take effect.
This policy is governed by the laws of Costa Rica.
Questions about privacy can be sent to support@desim.cc.