Version 1.0 · Effective 6 September 2026
The short version. We collect what it takes to sell you an eSIM and keep your account working: how to reach you, what you bought, and which profiles are yours. Your card is entered on Stripe’s page and we never see it. Analytics only start after you accept the banner; error reports run always, and they mask every piece of text on the screen. We do not sell your data and do not train anything on it. You can delete your account yourself, from your account page.
The English version is the one that applies; translations are provided for convenience. See also our Terms of Use.
Boutique eSIM is operated by Nerds Boutique L.L.C., 30 N Gould St Ste N, Sheridan, WY 82801, United States, which is the controller of the personal data described here. Write to service@nerds.boutique about anything in this document.
We do not sell personal data, we do not share it with advertisers, and we do not use it to train machine-learning models.
These companies process data on our behalf, each for one job, under contracts that limit them to it. The full list, with what each one receives and where it sits, is on the subprocessors page — it changes when a supplier does, which is more often than this document.
| Processor | What it does | What it receives |
|---|---|---|
| Amazon Web Services | Hosts the site and sends transactional email (EU, Frankfurt) | Everything below, at rest; email address and message content for order and account email |
| Stripe | Takes the payment | Your card details, entered on their page, plus the order amount and your email |
| eSIM connectivity supplier (Hong Kong) | Sources the data plan and orders the eSIM profile | The order identifier and the plan code only — no name, email or phone. |
| Simlessly Inc. (United States) | Runs the SM-DP+ platform that hands the profile to your phone | Your device's eUICC identifier and its IP address at the moment of installation — see section 5 |
| Mobile network operators | Carry your traffic where you travel | Device and network identifiers, connection data and approximate location, as any mobile network does |
| Google (Firebase) | Signs you in | Your credentials or social profile, your phone number for SMS codes, and a reCAPTCHA check |
| Sentry | Collects error reports (EU region) | Stack traces and the URL. Personal data is not attached to events |
| Amplitude | Product analytics — only after you accept | Account identifier, locale, currency, sign-in provider, and the events listed below |
| Google Ads | Measures whether an advert led to a purchase | Before you accept: cookieless, aggregated pings only. After you accept: an advertising cookie and the order amount |
| Pusher | Delivers live updates to an open page | The name of your private channel and a connection identifier |
| tawk.to | Live support chat — only if you open it | Your chat messages, the name and email you give, IP address and browser |
Two things happen outside our systems, and neither can be avoided — they are how an eSIM works.
When you install the profile. Your phone connects to the SM-DP+ server at rsp-eu.simlessly.com, operated by Simlessly Inc., and sends it the eUICC identifier of your device together with your IP address. The server returns the profile. Without this exchange the eSIM cannot be installed.
When you use the plan. Your traffic runs through the network of the mobile operator we buy the plan from. Like any mobile network, it sees the identifiers of your device and your SIM profile, the cells you connect through and how much data you use. That operator handles this data under its own rules and the telecoms law of its country, not under this policy.
We do not receive the content of your traffic and cannot see what you browse.
Card details are entered on a page hosted by Stripe, not on ours. We never see, handle or store a card number; we learn from Stripe whether the payment succeeded, the amount, the currency and enough of a reference to match it to your order. A refund to a card goes back the same way, to the card that paid — we cannot send it anywhere else, and we never see the number either time. Stripe processes your data as a controller in its own right under its own privacy policy.
The insurance and visa blocks are links to partners, and clicking one takes you to them under their own privacy policy.
Be aware of one thing we pass along: the link to iVisa carries the country of the passport you selected as a tracking parameter in the URL, so the referral can be attributed. The link to SafetyWing carries only our affiliate identifier. Your age band and travel dates are not sent to either — they stay with us, and are recorded as an analytics event only if you accepted analytics.
Until you accept the banner, the analytics library is not loaded, sets nothing and sends nothing. If you accept, we record product events — a plan viewed, an item added to the basket, a checkout started, an order placed, an eSIM installed, a partner link clicked — with the identifier of your account and properties such as plan, amount, currency and locale. Declining costs you nothing: sign-in, the basket and your currency all work either way.
That is this website. Our mobile app carries no such banner and its product analytics run from the start; write to service@nerds.boutique and we will delete your analytics data.
Error reports run regardless of your answer. They are how we find out the checkout is broken, and gating them would make exactly the people who decline invisible when it breaks for them. Nothing identifying is attached, and nothing is filmed: there is no session replay. We removed it rather than record the screens of people who had just declined analytics.
Account data lives as long as your account does. You can close it yourself, from the account page or in the app — step by step in Deleting your account. When you do, personal data is wiped, you are signed out everywhere and loyalty credits are forfeited; eSIMs already installed keep working but can no longer be managed. Orders and tax records are kept in anonymised form, as the law requires — we cannot delete an invoice. The same email address can sign up again afterwards as a new account.
Server logs are kept for 30 days. Database backups are kept for 7 days and then overwritten, so data from a closed account can remain in a backup for up to 7 days after deletion. Error reports and analytics events expire on the retention schedules of Sentry and Amplitude respectively.
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or send it to another provider. If you are in the EU or the UK these are your GDPR rights; in California, the CCPA gives you the right to know, delete, correct and opt out of sale or sharing — and we do neither.
Much of this you can do yourself: your profile, language, currency and account deletion are all in the account page, and the analytics banner can be answered again by clearing the site’s cookies. For anything else, write to service@nerds.boutique. We do not charge for this and will not treat you differently for asking. If we get it wrong, you may complain to your data protection authority.
We are a United States company and our providers operate in several countries. Orders, accounts and eSIM records are stored in the European Union (AWS, Frankfurt), and error reports stay in the European Union as well.
Our eSIM connectivity supplier is in Hong Kong. It receives an order identifier and a plan code, and no personal data about you — it cannot identify you from what we send. We will name it on request: write to service@nerds.boutique.
Personal data leaves the European Economic Area through Stripe and Google for payment and sign-in, and through Amplitude if you accepted analytics. Those transfers rely on the European Commission’s Standard Contractual Clauses together with encryption in transit and at rest. Write to service@nerds.boutique for a copy of the executed clauses. The full list of providers, with what each one receives, is on the subprocessors page.
Traffic runs over TLS. Session tokens are stored in cookies that scripts cannot read, which is what keeps a cross-site script from walking away with your account. Card data never touches our systems. No system is perfectly secure, but the account page shows you everywhere you are signed in, and closing the account signs all of them out.
The service is not for children. You must be at least 18 to buy, or 16 with the consent of a parent or guardian. If you believe a child has given us personal data, write to us and we will delete it.
When this policy changes we publish the new version here with a new version number and date. Material changes are announced on the site or by email before they take effect.
Version 1.0 — 6 September 2026. First published.
Nerds Boutique L.L.C.
30 N Gould St Ste N, Sheridan, WY 82801, United States
service@nerds.boutique