# Privacy policy

Last updated 2 November 2026

## Who is responsible

Simplestoolbar Ltd (Israeli company number 514580828), Yavne, Israel operates SimoraGo. For any privacy question or request, email support@simorago.com.

## When you buy

We collect the email address you enter, the plan you choose, your language and, if you came through a partner page, the partner. We use the email address to send you a link to your install page, which shows the QR code, and to contact you about your order.

Payment is taken by Tranzila in its hosted payment form. Tranzila receives your email address, the plan name and the amount, along with your card details. Your card details never reach our servers. Tranzila is the payment processor.

Our supplier, eSIM Access, provides the network service. The order we send to eSIM Access identifies the plan and our own transaction reference; it does not include your email address.

We send email through our email provider, Resend.

When an order is placed, we send ourselves an internal notification with a masked email address and the plan name.

## Analytics and consent

We use Google Analytics. Consent Mode is on and all analytics and advertising storage is denied by default. Until you accept in the banner, Google Analytics receives only cookieless pings. If you accept, Google Analytics sets its own cookies. You can change your choice at any time from the link in the footer.

Separately, our pages send a small first-party event beacon to /api/collect on our own server (the event name, event details such as the plan viewed, the page path, the referrer and the time). It sets no cookies, and it runs whatever you choose in the banner. The events are written to our server log.

## Server request log

Every request that reaches our server is logged: method, URL, IP address, country (from our CDN), user agent, request headers and the body up to 16 KB, including form fields such as the email address you type at checkout.

Before writing, we mask credentials: cookie values (cookie names are kept), authorization values, fields named like passwords, tokens, secrets or card data, and the tokens inside install, invitation, order and payment links. Bodies of payment, identity-check and call webhooks are not stored.

The log is a file on our server readable only by the server account. When it reaches about 200 MB it is renamed to a previous file, replacing the older previous file, so at most two files exist.

## Cookies and local storage

- sg_locale (cookie, one year): the language you picked.
- sg_partner (cookie, 30 days): set when you visit a partner page, so an order can be attributed to that partner.
- sg_session (cookie, 12 hours, not readable by scripts): keeps you signed in, only if you sign in to an account.
- sg_consent (local storage): your analytics choice.
- sg_first_touch (session storage): how you arrived, for the current visit.
- sg_call_banner_hidden_at (local storage): remembers that you closed the calling banner.
- Google Analytics cookies, only if you accept analytics.

## Your requests

To ask what we hold about you, or to ask for a correction or deletion, email support@simorago.com. We reply by email.

Source: https://simorago.com/en/privacy