Privacy Policy
Last updated:
This Privacy Policy explains how we collect and use personal data when you use the Arcline eSIM service, the website arcline-esim.com and the Telegram bot @Arcline_eSIM_bot (the "Service").
1. Controller and contact
The controller of your personal data is Arcline ESIM ("Arcline", "we", "us").
For any privacy question or request, write to support@arcline-esim.com with the subject "Privacy".
2. Data we collect
Account data. Email address; if you use Telegram, your Telegram ID, username, first and last name and language as provided by Telegram.
eSIM and usage data. eSIM identifiers (IMSI, ICCID), activation status, Balance, the name you give an eSIM, the partner network and country you connect through, data volumes and timestamps. This tells us which country and network you used, not your precise location.
Payment data. Amount, currency, payment method, status and transaction reference. Card and crypto-wallet details are handled by the payment providers; we do not store full card numbers.
Communications. Messages you send to support and our replies; notifications we send you (for example, low-balance alerts).
Technical data. IP address, browser and device type, language, pages visited, and security signals used to protect sign-in forms.
Cookies and similar technologies. See our Cookie Policy.
We do not ask for identity documents as standard. We collect them only if verification is required in the cases described in our Terms of Use.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, providing eSIM activation, charging data usage, keeping your Balance and history | Performance of a contract (Art. 6(1)(b)) |
| Processing payments, refunds and gift certificates | Performance of a contract (Art. 6(1)(b)) |
| Service notifications: activation details, low balance, cheaper network available, important changes | Performance of a contract (Art. 6(1)(b)) |
| Customer support | Performance of a contract; our legitimate interest in resolving requests (Art. 6(1)(b), (f)) |
| Preventing fraud and abuse, securing the Service (including bot protection on forms) | Legitimate interests (Art. 6(1)(f)) |
| Accounting, tax and other legal obligations; responding to lawful requests | Legal obligation (Art. 6(1)(c)) |
| Website analytics (Google Analytics) | Consent (Art. 6(1)(a)) where required |
| Marketing messages and advertising cookies | Consent (Art. 6(1)(a)) |
You can withdraw consent at any time; this does not affect processing carried out before withdrawal.
4. Who we share data with
We share data only as needed to provide the Service, with:
- eSIM connectivity partners and mobile network operators — to provision your eSIM and route and bill data;
- payment providers — Stripe (cards), Cryptomus (cryptocurrency) and Telegram (Telegram Stars);
- Telegram — when you use our bot or sign in with Telegram;
- email delivery provider — to send sign-in codes and service emails;
- Cloudflare — security checks (Turnstile) on sign-in and purchase forms;
- Google — website analytics via Google Tag Manager and Google Analytics, subject to your cookie choices;
- hosting and IT service providers — to run our infrastructure;
- professional advisers, authorities and courts — where required by law or to protect our rights.
Our service providers act on our instructions under data-processing agreements, or as independent controllers for their own services (for example, payment providers and Telegram). We do not sell your personal data.
5. International transfers
Some providers process data outside the European Economic Area (for example, in the United States). In such cases we rely on an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or on Standard Contractual Clauses with additional safeguards.
6. How long we keep data
| Data | Retention |
|---|---|
| Account data | While your account is active; deleted or anonymised within 30 days after account closure, except as below |
| Payment and transaction records | As long as required by accounting and tax law (typically up to 7 years) |
| eSIM usage records | Up to 24 months, then aggregated or deleted, unless needed for a dispute |
| Support communications | Up to 24 months after the request is closed |
| Security logs | Up to 12 months |
| Analytics data (Google Analytics) | Up to 14 months |
7. Your rights
Subject to the law, you have the right to:
- access your data and receive a copy;
- correct inaccurate data;
- request deletion;
- restrict or object to processing, including at any time to direct marketing;
- data portability;
- withdraw consent at any time.
To exercise your rights, contact support@arcline-esim.com. We may need to confirm your identity (for example, by a code sent to your email or Telegram). We respond within one month.
You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live or work or where you believe an infringement took place.
8. Security
We use encryption in transit (TLS), access controls and monitoring to protect your data. Activation codes give access to your eSIM: do not share them.
9. Automated decisions
We use automated checks to detect fraud and abuse. They do not produce decisions with legal or similarly significant effects without human review.
10. Children
The Service is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy. The current version and its date are always available on this page; we will notify you of material changes by email or in the Telegram bot.