Cookie preferences
Effective date: 10 October 2026.
With your analytics consent, we store campaign labels, a referring domain and a partner code in the encrypted esg_acquisition cookie for up to 30 days. We retain the first source and the latest non-direct source. Optional advertising measurement runs only with the corresponding consent.
What we store
| Storage | Purpose | Duration |
|---|---|---|
| october_session | Keep your secure session and sign-in working | Up to two hours of inactivity |
| XSRF-TOKEN, where set | Help protect forms from unwanted requests | Session-related, up to two hours |
| esimgator_cookie_choice | Remember that you have acknowledged necessary storage | One year |
| esimgator-cookie-choice (browser local storage) | Remember the same preference in this browser | Until you clear it |
| esg_language | Remember your selected language | One year |
| esg-currency | Remember your selected currency | Until you clear it |
Necessary storage supports sign-in and checkout. Optional source attribution requires your analytics consent. You can clear or block storage through your browser; blocking necessary storage can prevent sign-in or checkout.
Your choices
Open Cookie Preference in the footer to enable or withdraw analytics consent. Refusing analytics does not prevent purchases. Campaign information is copied to a new order only with consent at checkout; past orders cannot be attributed retrospectively.
Stripe checkout
Payments take place on Stripe’s payment page, which may use its own necessary security and payment technologies. See Stripe’s Cookie Policy.
Controller: Revaltex Group OÜ, Vesivärava tn 50-312, 10152 Tallinn, Estonia. Questions: info@esimgator.com. Read our Privacy Policy.
Google Analytics
With your renewed analytics consent, Google Analytics receives pseudonymous browser identifiers, public page visits and completed purchase amounts, currency and plan details. We do not send names, email addresses or eSIM activation codes. Google Analytics cookies are configured for 30 days. Advertising personalization and Google signals are disabled. You can withdraw consent through Cookie Preference.
Meta
With advertising consent, Meta receives public page visits, browser identifiers and completed purchase details to measure Facebook and Instagram ads. We do not send customer names, emails or eSIM activation codes.
You can withdraw advertising consent through Cookie Preference. Meta may process data internationally under its privacy policy.
Google Ads measurement
With analytics consent, Google receives advertising click identifiers and purchase details to measure Google ads. Advertising personalization stays off. Consent is optional and can be withdrawn in Cookie Preference. Google Ads measurement requires analytics consent and separate Google Ads measurement consent. Advertising click identifiers (gclid, gbraid and wbraid) may be included in public page addresses sent to Google. We do not send names, emails, checkout tokens or eSIM activation codes. Existing consent for Meta does not enable Google Ads measurement.
Package view statistics
With analytics consent, we measure which eSIM package cards you view and which packages you select for checkout. A random browser identifier is stored in esg-package-visitor in local storage for up to 30 days and is removed when you withdraw analytics consent. Our backend keeps a keyed hash of that identifier, the destination, data allowance, validity, package code and time. These statistics do not contain raw IP addresses, names, emails, payment details or eSIM activation codes, and are not sent to advertising providers. Statistical view records are retained for up to 366 days. Refusing analytics does not prevent browsing or buying.