Privacy Policy

02Personal data we collect

Account data: when you create an account we collect your email address and password. Passwords are handled by our authentication provider and stored only in hashed form. You may optionally add your name, and you may use Google sign-in to register or log in. We also remember your preferred website language.

Order data: when you buy an eSIM we collect your order details — the order number, the email address you provide for delivery and account matching, the selected package (destination, data, validity, quantity), the price, currency, coupon code and order status.

eSIM data: to deliver your eSIM we store the identifiers needed to install and use it — such as the ICCID, QR code and activation information — linked to your order and delivery email address.

Payment data: payments are processed by our payment provider (see the “Payments” section). We store a record of each payment — provider, amount, currency and status — but never your full card number. If you choose to save a card in your profile, you enter it yourself and we store only the card brand, the last four digits and the expiry date.

Device and technical data: as with any website, our hosting platform records standard technical data such as request logs, IP address and browser/device information, which is used to operate, monitor and secure the service. The “Trusted devices” feature in your profile shows which browsers and devices are signed in to your account, based on the browser's user agent.

Optional features: if you use them, we store: your identity-verification status and the document type you select (we do not currently receive or store copies of documents); your FalcoMoney balance and history; your notification preferences; and, when you request a change of account email, the new address pending verification.

Browser storage: we use your browser's local storage (not cookies) for a small number of functional items — keeping you signed in, remembering your language, and remembering your recent destination searches. You can clear this at any time in your browser settings. We do not use advertising or tracking cookies.

03How we use your data

We use your personal data to: create and manage your account; process your orders and payments; provision, deliver and support the eSIMs you buy; send you service emails such as order confirmations, eSIM delivery and data/expiry alerts; operate the loyalty (FalcoMoney) features; detect and prevent fraud and abuse and keep the service secure; meet legal and accounting obligations; and operate and improve the website.

We do not sell your personal data.

04Airalo — eSIM provisioning

Falcosim is an Airalo distribution/reseller partner and uses the Airalo Partner API to provision and manage the eSIMs sold on this website. When you complete a purchase, we send Airalo the minimum information required to fulfil your order: the selected package and quantity, a reference number for your order, and the delivery email address so the eSIM can be delivered and shared with you.

Airalo returns the eSIM identifiers (such as the ICCID and QR/activation data), which we store so you can install and manage your eSIM. Airalo also notifies us of data-usage and expiry events for your eSIM; we match these notifications to your order by ICCID and use them to send you relevant alerts.

Airalo processes personal data shared by Falcosim in accordance with the applicable data processing terms and its data protection obligations. Such data may be processed or transferred internationally where necessary to provide the eSIM services. We share with Airalo only the data necessary to fulfill and manage your eSIM order.

05Payments

Payments are processed through CardCom via its hosted payment page. When you pay, you are redirected to CardCom's secure page and enter your payment details (for example card details or other payment methods) directly with CardCom. Those details are handled by CardCom according to its own privacy and security terms and are not stored on our systems.

We send CardCom only the information needed to create your payment — the order reference, amount, currency and your email address — and we receive back the payment result (success, failure or cancellation) to mark your order accordingly.

06Other service providers

Base44: the website, its database, user authentication and transactional emails (such as order confirmations) run on the Base44 platform, which processes and stores data on our behalf under its own terms.

Google: if you choose Google sign-in, Google handles that authentication and shares your basic account information (your email address) with us.

Third-party content: some images (for example country flags and photos) are loaded from external content services. As with any website, standard request data (such as your IP address) is transmitted to the services your browser contacts.

07How long we keep your data

We keep your personal data only as long as necessary for the purposes described in this Policy: while your account is active, and afterwards only for records we need to keep — for example order, eSIM and payment records for service and accounting purposes, or where retention is required by law.

You can ask us to delete your account and personal data at any time (see “Your privacy rights”). Technical logs are kept for shorter operational periods.

08Data security

The website is served over HTTPS. Your data is stored on the Base44 platform, which applies access controls, and each signed-in user can view and manage only their own records. Sensitive service credentials are stored server-side and are never exposed to the website.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us as described below.

09International data transfers

Some of our providers (for example Airalo and Base44) may process personal data in other countries. When you use the website, your data may therefore be transferred to and processed in countries other than your own.

10Your privacy rights

You have the following options regarding your personal data: access the data we hold about you; correct or update it; delete it; restrict or object to certain processing; withdraw consent where processing is based on it; and request a copy of your data in a portable format.

Some of these options are built into the website: in Profile → Account information you can request a copy of your data (“Download your data”) and request account deletion (“Delete your account”).

To exercise any other right, contact us as described in the Contact section. We may ask you to verify your identity before acting on a request.

11Children

The website is not directed at children. You must be old enough to legally make purchases (in any case at least 18 years old) to buy from Falcosim. If you believe a child has provided us with personal data, contact us and we will delete it.

12Changes to this Policy

We may update this Privacy Policy from time to time. The date shown at the top of this page is the date of the current version, and significant changes will be highlighted on the website. Your continued use of the website after an update means you accept the updated Policy.

13Contact

For privacy questions, requests to exercise your rights, or any other matter regarding your personal data, contact us through the Support page on the website:

You can also use the in-app tools in Profile → Account information (“Download your data” and “Delete your account”).