This Privacy Policy describes how Sim Aggregator ("Company", "We", "Us") collects, uses, stores, processes, and protects User data when accessing or using the Service.
By using the Service, You agree to this Privacy Policy. If You do not agree, You must stop using the Service.
1. Scope
This Policy applies to all Users, visitors, and customers of the Service, regardless of jurisdiction or location.
The Company may update this Policy at any time. Continued use of the Service constitutes acceptance of the updated version.
2. Data Security Commitment
The Company applies reasonable technical, organizational, and administrative safeguards to protect Personal Data from unauthorized access, disclosure, loss, or misuse.
While no system is completely secure, the Company commits to maintaining commercially reasonable security standards.
3. Data We Collect
3.1 Personal Data
- Email address
- Account identifiers
- Contact details (if provided)
- Payment-related metadata (excluding full card details)
3.2 Technical and Usage Data
- IP address
- Device and browser information
- Operating system
- Access timestamps
- Activity logs
- Approximate location
3.3 SMS and Telecom Data
- Phone numbers used in activations
- SMS metadata (timestamps, sender IDs)
- Delivery and verification logs
4. Logging and Monitoring
The Company may log User activity, monitor usage patterns, detect fraud, and retain logs for operational, legal, and security purposes.
5. Purpose of Data Processing
Data may be used to:
- Provide and maintain the Service
- Prevent fraud and abuse
- Comply with legal and regulatory requirements
- Improve platform performance
- Resolve disputes and enforce Terms
6. Data Sharing
The Company may share data with:
- Telecom and SMS partners
- Payment processors
- Hosting and infrastructure providers
- Legal and regulatory authorities
- Business partners in case of mergers, acquisitions, or asset transfers
7. International Transfers
User data may be processed or stored in multiple jurisdictions. By using the Service, You consent to international data transfers.
8. Data Retention
Personal Data is retained for up to five (5) years after account termination, unless a longer period is required for legal, fraud-prevention, or compliance purposes.
After the retention period, data will be deleted or anonymized where reasonably possible.
9. User Rights
Users may request:
- Access to Personal Data
- Correction of inaccurate data
- Deletion of Personal Data
- Restriction or objection to processing
- Data portability where technically feasible
Requests may be denied if required to comply with legal obligations, security needs, or fraud prevention.
10. Cookies and Tracking
The Service may use cookies and similar technologies to:
- Maintain sessions
- Improve functionality
- Analyze traffic
- Enhance security
Users may disable cookies in browser settings, though some features may not function correctly.
10.1 Cookieless Analytics
Where permitted, the Company counts visitors who decline or have not yet responded to the cookie banner using privacy-preserving, cookieless analytics. This processing:
- collects only aggregated, de-identified usage data (such as page views) derived from a rotating server-side hash;
- writes nothing to your device — no cookies, no local storage — and does not identify you;
- relies on the Company's legitimate interest in understanding overall traffic.
When consent is declined or withdrawn, previously set marketing cookies are removed. The Company may disable this feature entirely.
10.2 Strictly Necessary Cookies
These cookies are required for core functionality and to honor your saved choices. They are set without consent (ePrivacy art. 5(3)) and are never used for advertising or cross-site tracking:
- cookie_consent — stores your cookie banner decision (accept or decline) so you are not asked again. Lifetime: up to 12 months.
- consent_id — a non-identifying identifier that links your choice to our server-side record proving consent was given. Lifetime: up to 12 months.
- referralCode — set only if you arrive through a referral link; records which referrer to credit when you register. Lifetime: up to 90 days, and it is deleted once registration completes.
10.3 Session Recording
With your separate, explicit consent, the Company may record anonymized session replays (interactions such as clicks and navigation) to diagnose issues and improve the interface. This processing:
- is optional and off by default — it runs only if you opt in via the cookie banner, in addition to analytics consent, and you can withdraw it at any time through "Cookie settings";
- masks all form inputs and all on-screen text, and additionally excludes sensitive elements (SMS codes, balance, crypto addresses, API keys) from capture;
- is processed by our analytics provider PostHog on EU infrastructure, on the basis of your consent.
Withdrawing consent stops any further recording.
11. Third-Party Services
The Company is not responsible for third-party privacy practices. Users interact with third-party services at their own risk.
12. Law Enforcement and Legal Requests
The Company may disclose data if required by law, legal process, or to protect Company rights and security.
13. Minors
The Service is not intended for individuals under 18. If data from a minor is discovered, it may be deleted.
14. Business Transfers
In the event of a merger, sale, or restructuring, User data may be transferred to the new entity.
15. Limitation of Liability
The Company is not liable for damages arising from data breaches or incidents beyond reasonable control.
16. Governing Law
This Policy is governed by laws selected by the Company. Disputes are resolved in the Company's chosen jurisdiction.
17. Contact
The Company is not obligated to respond to privacy requests. Communication is handled at the Company's discretion.