Cookies

1.The cookies we set

These are the cookies used on the website. Analytics cookies are loaded only after you choose Accept all.

• simup_session keeps you signed in. It is set when you sign in and lasts 30 days, or until you sign out. It holds a random token and none of your details. Our server stores only a hash of that token, so a copy of our database would not hand anyone a working session. Your browser will not let any page script read it.
• simup_invite remembers a referral code. It is set when you open an invite link such as esimup.io/i/ABC123 and lasts 30 days. It holds the code and nothing else. It exists so that if you sign up minutes or days later, the credit still reaches the friend who invited you. This one can be read by the page, because the signup form uses it to fill the code in for you.
• simup_oauth_state protects signing in with Google or Apple. It is set the moment you tap that button, lasts 10 minutes, and is deleted the moment you come back. It holds two things: a random value we check on the way back, to confirm that the sign-in returning to us is the one you started, and the page on esimup.io you should land on afterwards. Your browser will not let any page script read it. For Apple it has to be readable on a cross-site return, because Apple posts the result back from its own origin.
• simup_consent remembers whether you chose Accept all or Essential only. It lasts 180 days and prevents us from asking on every visit.
• _ga and _ga_23SRR9T8N1 may be set by Google Analytics after you choose Accept all. They help us understand page views and site usage in aggregate. They are not loaded when you choose Essential only.

2.What we do not set

We are not being coy here. There is no fourth cookie doing something we would rather not describe.

• No advertising cookies. We do not run ads and we do not sell ad space.
• No ad networks and no social pixels.
• No analytics unless you choose Accept all. If you choose Essential only, Google Analytics is not loaded.

3.If you block or delete them

You can block or clear cookies in your browser settings, and nothing about browsing eSimUP breaks. You can still look through destinations and read prices with all three blocked.

Clearing cookies signs you out. It does not delete your account, your balance or your eSIMs, and it does not cancel a plan that is already running.

• Signing in will not persist. Without simup_session the site has no way to tell it is still you, so you will be signed out again on the next page you open.
• Sign-in with Google or Apple will be refused. Without simup_oauth_state we cannot check that the sign-in coming back is the one you started, and we would rather reject it than guess.
• An invite code will not be remembered. You can still use it by typing it in when you sign up.
• Analytics will not run unless you choose Accept all.

4.The app

The iOS and Android app does not use cookies at all. It holds its session token directly and sends it with each request. Everything on this page is about the website.

5.Consent

We show a cookie banner because analytics is optional. Essential only keeps the store working and does not load Google Analytics. Accept all lets us load Google Analytics to understand which pages help customers.

Whether a banner is legally required depends on where the company is registered and where its customers are. eSimUP is operated by MAMMADOFF AGENCY LLC, Heydar Aliyev ave, Arena Plaza, Block C, Floor 7, Baku, Azerbaijan, taxpayer number 7200653321, and it sells to people in many other countries. This is one of the points that needs a lawyer's answer before launch.

If we add another optional cookie, we will ask you first, and this page will be updated before it is set rather than after.