Privacy policy

This covers clearesim.com, the website. The iPhone and Android apps have their own policies, published per app store, because they can collect things a website cannot.

The controller is Bearacle, 30 N Gould St Ste N, Sheridan, WY 82801, USA. For anything in this policy, email info@bearacle.com or (307) 240-2425.

The short version

• Aggregate analytics, no advertising, no tracking pixels. We count page views with Vercel Web Analytics to see which destinations people look for. It sets no cookies, stores no IP address, and cannot follow you to another site — visitors are counted with a hash that is rotated daily, so there is no identifier that persists. What it records is the page, the referrer, and a coarse country, browser and device type. There are no ad scripts and we do not build a profile of you.
• No cookies for tracking. Analytics included — it uses none. The only thing stored in your browser is your sign-in session and your light/dark preference, both in local storage, both needed for the site to work.
• We never see your card number. Stripe handles it. It does not reach our servers.

What we collect

Your email address

Because a purchase needs an account. It is how we send your sign-in code, how you get back to an eSIM you have paid for, and how we reach you about an order.

Your orders

Which plan, how many days, the amount charged, the time, and the status. Needed to sell you something, to show you your purchase history, and to answer a refund request.

Your eSIMs

The profile's identifiers (ICCID and activation code), its status, and when it expires. These are what the QR code contains and what lets us investigate an installation problem.

A payment reference

A Stripe customer identifier and a payment identifier, so a refund can be matched to a charge. Not your card number, which we never receive.

Anything you write to support

A refund reason or a message, plus a snapshot of the eSIM it concerns, so a ticket can still be answered if the underlying record changes.

If you sign in with Google or Apple, we receive your email address from them, and from Apple only the relay address if that is what you chose to share. We do not receive your password in any case.

What we do not collect

No device identifiers or advertising IDs. No push tokens — this is a website. No location: we know which destination you bought a plan for, which is a purchase, not a position. No browsing behaviour across other sites. We do not build a profile of you or sell anything about you to anybody, and we do not use your data to train machine-learning models.

Who it is shared with

Stripe

Takes the payment. Receives your email address and the order amount, and holds the card details you enter directly with them.

eSIM Access

Our eSIM supplier. Receives the plan and an order reference so a profile can be issued. Your email address is not sent to them.

Supabase

Hosts the database and handles sign-in. Stores what is listed above on our behalf.

Vercel

Serves the website.

Resend

Delivers support email when you contact us about an order.

Each acts on our instructions, for the purpose above and nothing else. We may also disclose information where the law requires it. Some of these providers operate outside your country, so your information may be processed abroad under the safeguards those providers offer.

Storage in your browser

Two things, both in local storage rather than cookies:

• Your sign-in session. Without it you would be signed out on every page, and could not reach the eSIM you paid for. Clearing it signs you out.
• Your light or dark preference, if you have set one. It never leaves your browser.

Stripe sets its own storage on the checkout page for fraud prevention, which is a condition of accepting card payments at all.

How long we keep it

Order and payment records are kept for seven years, because tax and accounting rules require a record of a sale.

You can delete your account from the Profile screen in the app, or by emailing info@bearacle.com. Doing so removes, immediately and permanently: your profile and name, every eSIM on the account and its usage readings, and any support or refund correspondence.

The order rows themselves are not deleted — that is the record of a sale we are required to keep — but the link to you is erased. What remains is a plan, an amount and a date with no account attached to it, held for the period above. An eSIM already issued is not cancelled at the network: you paid for it, and it keeps working until it expires.

Stripe keeps its own record of the payment under its own retention rules, which we do not control and cannot shorten. That is a condition of accepting cards.

Your rights

Depending on where you live, you may have the right to a copy of your data, to correct it, to have it deleted, to restrict or object to how it is used, and to complain to a data protection authority. Email info@bearacle.com and we will act on it.

You can delete your account at any time. Deletion removes your account and your ability to sign in. It does not remove the record of a completed sale where we are required to keep it, and it does not cancel an active eSIM — tell us if you want both.

Security

Traffic is encrypted in transit. Database access is restricted per account, so one customer's records are not reachable by another. Card details never touch our servers. No system is perfect; if a breach affected you we would tell you and the relevant authority as the law requires.

Children

The service is not directed at children and we do not knowingly collect their information. If you believe a child has given us data, email us and we will remove it.

Changes

If this policy changes, the date at the top changes with it. Where a change is significant we will say so rather than rely on you noticing.