Privacy policy

1. Who is responsible for your data

FreeSim (Florid Imeraj PF, NIPT M31710021S) is the controller of the personal data described here. You can reach us about anything in this policy at support@freesim.travel.

2. What we collect

• Contact data: the email address you enter at checkout or when you sign in.
• Order data: the plan you bought, price, order status, payment reference and timestamps.
• eSIM data: the eSIM's identifiers (such as its ICCID), activation details and data-usage and expiry information, so we can show it in your dashboard.
• Payment data: payments are handled by our payment provider. We receive a confirmation and reference, not your card number.
• Technical data: IP address, browser and device type in server logs, used to keep the service secure and to limit abuse such as repeated sign-in attempts.
• Visit statistics: which pages of freesim.travel are viewed, the country the visit comes from (derived from your IP address, which we do not store) and the website that referred you. Visits are counted with an anonymous identifier that changes every day, so we cannot recognise you across days or link visits to your orders.
• Support messages: what you send us when you write to support.

We do not ask for your name, address, passport or ID to sell you a data eSIM.

3. Why we use it

• To deliver your order and let you view your eSIMs (performing our contract with you).
• To send the emails you need: your eSIM, sign-in codes and important service messages.
• To keep accounting and tax records as the law requires.
• To prevent fraud and abuse and to keep our systems secure (our legitimate interest).
• To understand, in aggregate, how many people visit and from where, so we can improve the site (our legitimate interest).
• To answer your questions and resolve problems.

We do not sell your data and we do not use it for advertising.

4. Who we share it with

We use a small number of service providers who process data on our behalf:

• hosting and delivery of the website (Vercel);
• our database (Neon);
• email delivery (Resend);
• payment processing (our payment provider);
• eSIM network partners, who receive the technical data needed to issue and manage your eSIM.

We may also disclose data where the law or a public authority requires it, or to protect our rights against fraud or abuse.

5. International transfers

Some of these providers process data outside Albania and the European Economic Area. Where that happens we rely on appropriate safeguards, such as standard contractual clauses, and choose providers that commit to protecting personal data.

6. Cookies

We use only strictly necessary cookies. When you sign in to your dashboard we set a secure session cookie so you stay signed in (it lasts up to 30 days, or until you sign out). We do not use advertising or analytics cookies; our own visit statistics work without cookies and without storing anything in your browser. If that changes we will update this policy and ask for your consent where the law requires it.

7. How long we keep it

• Order and billing records are kept for as long as accounting and tax law requires.
• eSIM records are kept while the eSIM is valid and afterwards as needed to handle support and disputes.
• Sign-in codes are stored only as a one-way hash and are removed once used or shortly after they expire.
• Support emails are kept as long as needed to resolve your request and any follow-up.

8. Security

Data is encrypted in transit. Access to our systems is restricted, sign-in uses short-lived one-time codes with attempt limits, and card data never reaches our servers. No system is perfectly secure, so if you believe your account has been accessed by someone else, tell us immediately.

9. Your rights

You can ask us to access, correct, delete, restrict or export your personal data, and to stop processing it where we rely on legitimate interest. Write to support@freesim.travel and we will respond within one month. Some records (for example, invoices) we must keep by law. You also have the right to complain to the data protection authority in your country. In Albania this is the Information and Data Protection Commissioner.

10. Children

FreeSim is not directed at children under 16, and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We will publish any change here with a new “last updated” date, and tell you directly if the change is significant.