Privacy Policy
At PikaSim, privacy is our foundation.
We've built our entire service around protecting your personal information.
Last updated: May 5, 2026
No Email Required
No email is needed to buy or receive an eSIM, and none is stored with your order
No Account Required
No registration, no profile, no personal data stored by us
Crypto Option
Pay with Bitcoin, Lightning or Monero: no email, no account, no card details
Our Privacy Principles
1. No Account Required
Unlike other eSIM providers, PikaSim does not require you to create an account. You don't need to provide a username, password, phone number, or build a profile with us. Your eSIM details appear immediately on the purchase confirmation page. No login required.
2. We Don't Collect Email Addresses
Your eSIM details are shown immediately on the purchase page. You don't need to provide an email to receive your eSIM.
Two Payment Options - Different Privacy Levels:
- π Cryptocurrency (Maximum Privacy): Pay with Bitcoin, Lightning or Monero straight to our own payment server. No email, no account, no card details. This is our most private payment option. What remains is what any crypto payment leaves: the transaction on the blockchain, and for coins we convert through Trocador, the swap details described under "Crypto Conversions" below.
- π³ Credit Card (Stripe): For convenience, we offer Stripe payments. Stripe requires an email for fraud prevention, but PikaSim does NOT collect or store your email. We never see it, never save it, and can't access it.
This means:
- β No email address is stored with any purchase or eSIM
- β The only emails we hold are ones customers choose to add to a support ticket, deleted 3 months after the ticket closes
- β We cannot send you marketing emails and have nothing to sell to third parties
- β Your email isn't linked to your eSIM in our system
- β For Stripe users: Use a disposable email for extra anonymity
- β For crypto users: No email needed at all
Bottom line: Choose crypto for maximum privacy (no email at all), or use Stripe for convenience. Either way, PikaSim never asks for your email to sell you an eSIM. If you choose to leave a contact address on a support ticket so we can reply, it stays on that ticket and is deleted 3 months after the ticket closes (see "If You Contact Us" below). Learn more in our FAQ.
3. No Personal Data Collection
PikaSim does not collect:
- Your name
- Your email address
- Your phone number
- Your home address
- Your browsing history
- Your IP address as part of your order or eSIM record
- Location data beyond what's necessary for eSIM functionality
- Device identifiers for tracking purposes
Where an IP address IS touched, so there is no blanket claim: (1) purchase attribution, held from checkout until the payment settles or expires, then deleted, and never captured if you opt out (see "Website Analytics"); (2) abuse prevention: support tickets and chat store a salted one-way hash of the IP, phone-plan orders and free-eSIM claims keep the IP for fraud control for 30 days, and rate limits count requests per IP in memory only; (3) server logs, which keep a truncated IP (see "Server Logs"). Nothing else records it.
What Information We Process
To provide you with eSIM service, certain information must be processed. We are transparent about what's collected and why:
Payment Information (via Stripe)
Payment processing is handled by Stripe, a PCI-DSS compliant payment processor. Stripe collects:
- Credit/debit card information (securely encrypted)
- Billing address (required by card networks)
- Email (required by Stripe's checkout)
Important: We never see or store your full credit card number. Stripe handles all payment data securely. View Stripe's privacy policy at stripe.com/privacy
eSIM Technical Data and Our Network Partners
eSIMs are provisioned through wholesale mobile network partners. We send them only an order reference and the plan you bought: no name, no email, no IP address, nothing that identifies you. To deliver and meter the eSIM they process:
- ICCID (eSIM card identifier)
- Network usage data (for data allocation and top-ups)
- Connection timestamps (for service delivery)
Like any mobile network, the host carrier you connect through sees your device identifiers and network location while you are connected. That is inherent to cellular service and is governed by telecom law in the country you are in, not by us. This data is necessary for the eSIM to function and is not linked to your identity since we don't require account creation. Partner retention follows their own policies, which we do not control.
If You Contact Us
We never ask for an email address. Support runs through tickets and the website chat; if you choose to add a contact email to a ticket, we use it only to reply to that ticket. Support messages (support tickets, the website chat, and any email that reaches us) are stored on our EU servers and, for email, in our EU email provider.
An AI assistant drafts most first replies and reads your message to do so. It runs on Anthropic's commercial API, which does not use the content to train models. If Anthropic is temporarily unavailable, a single chat turn can be routed through OpenRouter to an OpenAI model under their API terms (also not used for training). A human reviews anything the assistant cannot resolve.
Retention: the content of a support conversation (your message text, any contact email, attachments) is deleted 3 months after the ticket closes; chat transcripts 3 months after the last message. You can ask us to delete a conversation sooner at any time.
Crypto Conversions
Bitcoin, Lightning, and Monero are paid directly to our own self-hosted payment server. Other coins are converted by Trocador, a third-party swap service, before reaching us. Trocador sees the sending address and the amount, but no order details.
SMS Numbers
Messages received on a rented or one-time SMS number pass through our SMS provider's systems to reach you. Treat them as you would any SMS: they are not end-to-end encrypted.
Website Analytics: Why We Chose Plausible Over Google Analytics
Most websites use Google Analytics, which tracks you across the entire internet, builds detailed profiles about you, stores cookies on your device, and shares your data with Google's advertising network. We refuse to do this.
Instead, we use Plausible Analytics β a privacy-first, open-source analytics tool that's fundamentally different:
- πͺ Zero cookies β Plausible doesn't store anything on your device. Ever.
- π No personal data stored β your IP address is used only to derive a country and a visitor hash that rotates daily, then discarded; no device IDs or personal identifiers
- π« No cross-site tracking β what you do on PikaSim stays on PikaSim. We can't see what other sites you visit.
- π€ No user profiles β we can't identify individual visitors or track you over time
- πͺπΊ EU-hosted β all data stays in the European Union, subject to GDPR protections
- β GDPR/CCPA compliant β no consent banner needed because no personal data is collected
- π‘οΈ Honors Global Privacy Control: if your browser sends the GPC signal (Brave and DuckDuckGo do by default; Firefox and Chrome can be set to), the analytics script is never loaded at all. You can also opt out manually at pikasim.com/notrack.
What we see: Anonymous, aggregate data only. Example: "50 people visited the Japan eSIM page today" β not "John Smith from Texas visited Japan eSIM at 3:42pm."
What we DON'T see: your identity, your location beyond country level, or anything that could identify you personally.
Purchase attribution: when a purchase completes, we record which page and referrer the buyer arrived from, so we know which pages sell. The page is recorded with its identifiers removed: no query string (an eSIM ICCID or a checkout session ID in the address never reaches analytics) and order or dashboard IDs in the path replaced by a placeholder. The same rule applies to every analytics event and to the landing page remembered for the session. To match the purchase to that visit, your IP address and browser user agent are held from checkout until the payment settles or the invoice expires (minutes for cards, up to a couple of hours for crypto) and then deleted, including the copy held in the card checkout session; a daily job removes anything a payment path left behind. They are never stored with the order. If you opt out at pikasim.com/notrack or your browser sends Global Privacy Control, none of this happens: no analytics script, no attribution, no IP captured, on the website or on our servers.
View Plausible's privacy policy at plausible.io/privacy and their data policy for full transparency.
What We DON'T Do
β No Marketing Emails
We don't send newsletters, promotional emails, or spam. Ever.
β No Tracking Cookies
We don't use tracking cookies or third-party advertising trackers.
β No Data Selling
We never sell, rent, or share your data with third parties for marketing.
β No User Profiles
We don't build profiles, track your behavior, or create shadow accounts.
β No Invasive Analytics
No Google Analytics, no Facebook Pixel, no tracking cookies. We use privacy-focused Plausible only.
β No Social Media Pixels
We don't use Facebook Pixel or other social media tracking tools.
Anonymous Top-Ups
When you top up your existing eSIM, you can do so anonymously:
- Enter your ICCID (the number on your eSIM)
- Select your top-up package
- Complete payment via cryptocurrency (most private) or Stripe
- Data is added to your eSIM automatically
No login required. No account needed.
Tor Onion Mirror
PikaSim is reachable directly over the Tor network as a v3 onion service. When you browse and buy through the onion address, your traffic goes from the Tor network straight to our server. No Tor exit node is involved, because the connection never leaves the Tor network.
As of July 2026, the regular site connects directly to our server too: no Cloudflare, no TLS-terminating CDN middlebox sits in front of pikasim.com. Your connection is encrypted end to end to hardware we control. The onion route additionally hides your network location from us and your ISP.
http://77mlhb4yz4kcg24ewnpevy3balbkb5jwknnriq6ximdpn4r4pzai3qad.onion
Open it in Tor Browser. When you visit the regular site in Tor Browser, it also offers the onion version automatically. Crypto payments work end to end over Tor, so you can go from browsing to an activated eSIM without leaving the network.
Max Privacy eSIMs
π‘οΈ Extra Privacy Protection
Not all eSIMs are created equal when it comes to privacy. Some eSIM providers route your internet traffic through Hong Kong or mainland China, where government surveillance laws may require logging of user data.
PikaSim offers a "Max Privacy" filter on all country pages that shows only eSIMs that do NOT route traffic through Hong Kong or China.
Why This Matters
- China has extensive data surveillance laws requiring telecom providers to store and share user data with authorities
- Traffic routed through Hong Kong/China may be subject to inspection or logging
- Hong Kong's National Security Law expanded government access to data passing through the region
- Even encrypted traffic reveals metadata (sites visited, timing, frequency) that may be logged
How to Use Max Privacy
On any country page, enable the "Max Privacy" toggle to see only privacy-respecting eSIM options. Max Privacy packages may cost slightly more but offer stronger privacy protection.
π‘ Tip: All of our Global eSIM packages are automatically Max Privacy β they never route through China or Hong Kong.
We Fund the Networks Privacy Depends On
Privacy is not just our policy, it is something we actively support. PikaSim runs free public infrastructure for the wider privacy community, and every piece is independently verifiable:
- A public Tor relay (non-exit, nickname PikaSim) donating bandwidth to the anonymity network. Verify it on the official Tor Metrics directory, or read our Tor relay page.
- A censorship-resistant Nostr relay with free write access for customers.
See them both on our privacy infrastructure page.
Data Retention
Since we don't collect personal data or require accounts, there's minimal data to retain:
- Payment Records: Retained by Stripe for legal compliance (fraud prevention, chargebacks) as required by payment card networks
- eSIM Technical Data: Held by our network partners under their own retention policies, which we do not control
- Purchase Attribution: IP address and user agent held only from checkout until settlement or expiry, then deleted (never captured if you opt out or send Global Privacy Control); the landing page is kept with identifiers removed
- Support Conversations: Message content, contact email, and attachments deleted 3 months after a ticket closes; chat transcripts 3 months after the last message. Tickets with no reply for 7 days close automatically
- Abuse Prevention: Salted IP hashes on tickets and chats follow the conversation; phone-plan order and free-eSIM claim records expire after 30 days
- Server Logs: Web-server logs hold a truncated IP (last part removed), the request path without its query string, and the browser user agent; they rotate by size and application logs are deleted after 30 days
- Website Analytics: Aggregated, anonymous data retained indefinitely (no personal identifiers)
We do not maintain a database of user accounts or personal information.
Third-Party Services
To provide our service, we work with the following third parties. We've carefully selected privacy-respecting partners:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing (credit/debit cards) | stripe.com/privacy |
| BTCPay Server | Cryptocurrency payment processing (self-hosted) | btcpayserver.org |
| Plausible Analytics | Privacy-focused website analytics, self-hosted by us in the EU (no cookies, no personal data stored) | plausible.io/privacy |
| Trocador | Converts altcoin payments (coins other than BTC, Lightning, XMR) before they reach our payment server | trocador.app/privacy |
| Anthropic | AI model that drafts support replies (commercial API, content not used for training) | anthropic.com/legal/privacy |
| OpenRouter / OpenAI | Backup AI model for the support chat, used for a single turn only when Anthropic is unavailable (API terms, content not used for training) | openrouter.ai/privacy |
| Mobile network partners | eSIM provisioning and metering. They receive an order reference and the plan only, never your identity. Not named publicly; see "eSIM Technical Data and Our Network Partners" above. | Per partner |
| SMS number provider | Receives messages sent to rented and one-time SMS numbers | Per provider |
Note: We have no control over how these third parties handle data. We encourage you to review their privacy policies.
Your Privacy Rights
Depending on your location, you may have rights under GDPR (EU), CCPA (California), or other privacy laws:
- Right to Access: Request what data we have about you (likely minimal to none)
- Right to Deletion: Request deletion of your data
- Right to Rectification: Correct inaccurate data
- Right to Object: Object to data processing
How to Exercise Your Rights: Open a support ticket (category "Other", mention it is a privacy request). You can also raise it anonymously in the website chat.
Important: For standard eSIM purchases we hold no personal data beyond technical identifiers. If you have used our SMS service or a PikaSim Wallet, we hold the associated service records (such as issued numbers and received messages) and will delete them on request, subject to minimal payment records retained for the legal dispute window. For card payment data itself, contact Stripe directly.
Security Measures
We take security seriously to protect the limited data we do process:
- HTTPS encryption for all website traffic
- Secure payment processing via PCI-DSS compliant Stripe
- No stored payment data on our servers
- Regular security audits of our infrastructure
- Minimal data collection reduces exposure risk
Infrastructure & Data Residency
PikaSim's servers and databases are hosted in Helsinki, Finland β a European Union member state with some of the strongest privacy laws in the world.
We chose Finland specifically because:
- EU data protection β All data is subject to the General Data Protection Regulation (GDPR) and Finnish privacy law
- Strong privacy jurisdiction β Finland has robust constitutional privacy protections and strict data protection enforcement under Finnish law
- Strong rule of law β Finland consistently ranks among the top countries globally for judicial independence, transparency, and civil liberties
This means your data is stored under European privacy jurisdiction regardless of where you are located when using our service.
Data Breach Response Plan
In the unlikely event of a data breach affecting personal information, PikaSim is committed to the following response protocol in accordance with GDPR Article 33:
- Detection and Assessment: Upon discovering a potential breach, we will immediately assess the scope, nature, and severity of the incident.
- Supervisory Authority Notification: If the breach is likely to result in a risk to individuals' rights and freedoms, we will notify the relevant data protection authority within 72 hours of becoming aware of the breach.
- Affected User Notification: If the breach is likely to result in a high risk to individuals, we will communicate the breach to affected users without undue delay through a prominent notice on our website, as we do not collect email addresses for direct notification.
- Containment and Recovery: We will take immediate steps to contain the breach, mitigate any damage, and prevent further unauthorized access.
- Documentation: All breaches will be documented, including the facts, effects, and remedial actions taken, regardless of whether notification to the supervisory authority is required.
Note: Given our minimal data collection practices (no accounts, no email storage, no personal identifiers), the scope of any potential breach is inherently limited. Our primary data at risk would be eSIM technical identifiers (ICCIDs) and payment transaction records held by our payment processors.
Children's Privacy
PikaSim does not knowingly collect information from children under 13 (or under 16 in the EU). Our service is intended for adults. If you believe a child has provided us with personal information, please open a support ticket so we can delete it.
Changes to This Privacy Policy
We may update this privacy policy from time to time. The "Last updated" date at the top will reflect the most recent changes. Material changes will be communicated through a notice on our website.
Contact Us
If you have questions about this privacy policy or your privacy rights, contact us:
Support ticket: pikasim.com/help-tickets (we handle all requests through tickets, not email)
Website: pikasim.com
Privacy by Design
At PikaSim, we believe privacy is a fundamental right. We've built our service from the ground up to minimize data collection, maximize transparency, and give you control. No account. No email collection. No tracking cookies. Crypto option for maximum anonymity.