About this policy
This Privacy Policy applies when you visit the Magic eSIM international website — magicesim.store/en/ and its other non-Russian language versions — and when you contact our support team.
Online purchases are not yet available on the international website. Before they become available, we will publish an updated Privacy Policy that covers orders, payments and the delivery of eSIMs.
The Russian-language version of the website has its own privacy policy, which applies when you use that version.
1. Who we are
The controller of your personal data is:
- Individual Entrepreneur ALEKSANDR KHARIN, registered in Georgia, trading as Magic eSIM
- Identification number: 305887261
- Address: Georgia, Tbilisi, Saburtalo district, Bakhtrioni str. N22, Apt. 75
- Email for privacy questions: support@magicesim.store
2. What data we process and why
We do not require you to create an account. We do not ask for your telephone number, identity documents or payment details, and we do not need your name or postal address. If you include your name or postal address in a message to us — for example, in a model withdrawal form from our Refund Policy — giving them is optional, and we use them only to handle that message.
When you browse the website
- Data: your IP address, browser and device information, the pages you request and when you request them.
- Why: to show you the website and to protect it against misuse.
- Legal basis: our legitimate interest in running a secure website.
When you ask for the exact price of a plan
- Data: the plan and the number of days you chose, together with your IP address and technical data.
- Why: to calculate the current price and hold it for 30 minutes.
- Legal basis: our legitimate interest, and steps you ask us to take before a possible purchase.
Our server uses your IP address only briefly, in memory, to stop excessive requests; it does not save it with the price request. The saved price record contains no personal data.
When you go through checkout
Online payment is not yet available, so no order can be placed. At checkout you can enter an email address and tick the boxes that accept our Terms of Service and Refund Policy and ask us to start providing the plan straight away.
While payment is unavailable, the email address and the boxes you tick stay on the page in your browser: they are not sent to us, and they are not saved in your browser’s storage. At checkout, the only request sent to our server is the price request described above, which contains neither.
When you write to support
- Data: your email address, your message and any attachments.
- Why: to answer you.
- Legal basis: our legitimate interest in answering enquiries, and steps you ask us to take before a possible purchase.
Logs
Our hosting provider keeps technical logs of requests to our server for a limited period (see section 6). These logs may include IP addresses and, occasionally, parts of requests that our server could not process.
What we do not do
We do not sell personal data, we do not use it for advertising or profiling, and we do not send marketing emails. We do not sell or share personal data as “sell” and “share” are defined in California law, and you can use the rights in section 7 wherever you live, including in the United States.
3. Cookies and local storage
The international website uses no cookies and no analytics, advertising or tracking tools.
It stores only the following small values in your browser:
mesim.site.lang(local storage) remembers the language you chose — in the language menu, or by opening a language version from the Russian version of the website — so that magicesim.store opens in that language next time. It holds only a language code, such as “en”, and stays until you clear your browser’s data for this website.me-logo(session storage) plays the logo animation once per visit. It holds only the value “1” and is deleted when you close the tab.mesim.lang.auto(session storage) is set only when you open magicesim.store and are taken automatically to the version in your browser’s language. It tells the page you arrive on that this language was not your choice, so that it is not remembered as one. It holds only the value “1”, and that page deletes it as soon as it opens.
These values only make the website display as you asked; they are not sent to us or to anyone else. If your browser does not allow them, the website still works: your language is not remembered and the logo animation does not play. If we ever add an analytics or similar tool, we will first update this policy and ask for your consent where the law requires it.
Do Not Track
We do not track you over time or across other websites or online services, and we do not allow other companies to collect personal data about your online activities over time and across different websites when you use our website. For this reason we do not respond differently to “Do Not Track” or Global Privacy Control signals: whether your browser sends one or not, no such tracking takes place.
4. Service providers who process data for us
To run the website and our support, we use the following service providers. Each processes data only to provide its service.
GitHub, Inc. (United States), with its network provider Fastly, Inc.
Hosts the website’s pages. GitHub also logs visitors’ IP addresses for its own security purposes, under its own privacy statement. Data: IP address and technical data of your visit.
Render Services, Inc. (United States), with its network provider Cloudflare, Inc.
Runs the server that supplies plan lists and prices to the website. Data: IP address, technical data, and the plan and number of days you ask a price for.
Supabase, Inc. (United States)
Hosts the database of our server. For the international website it holds the price records described in section 2, which contain no personal data.
ImprovMX Incorporated (United States)
Receives emails sent to support@magicesim.store and forwards them to our mailbox. It keeps delivery logs for 7 days and holds the message content only until it is delivered. Data: your email address, the message headers and the message content in transit.
Proton AG (Switzerland)
Hosts our support mailbox and sends our replies. Data processed: your email address, message headers, message content and any attachments. We use this service to receive, store and respond to support enquiries.
We may also disclose data where the law requires it, or where it is necessary to establish or defend legal claims.
5. International processing of data
We are based in Georgia, but our service providers are international companies. As a result, your data may be processed outside Georgia, mainly in the United States, the European Economic Area and Switzerland, and in other countries where these providers or their own providers operate.
Some of these countries, including the United States, may offer a lower level of data protection than Georgia or the European Union.
What we do to protect your data:
- We collect very little data: no account, no analytics or tracking, no payment data.
- Render and GitHub take part in the EU–U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection.
- Data travelling to and from our website and server is encrypted (HTTPS).
These measures reduce the risks described above but do not remove them.
You can ask us for details of these safeguards, including copies where available, by writing to support@magicesim.store.
6. How long we keep data
When a period ends, we delete the data or make it anonymous, normally within 30 days. If data is needed for a dispute or a legal claim, we keep it until the matter is closed.
- Support emails: 3 years after the last message, so that we can deal with follow-up questions and claims.
- Records of privacy requests and our answers: 3 years after the request is closed.
- Price records (no personal data): 90 days.
- Hosting logs of our server: up to 30 days.
- Email forwarding logs: 7 days (set by ImprovMX).
- Website visitor logs: as stated in GitHub’s privacy statement.
7. Your rights
You can ask us:
- whether we process your data, and for a copy of it;
- to correct inaccurate data;
- to delete your data, unless we must keep it by law or for a legal claim;
- to block (restrict) the processing of your data;
- to give you your data in a portable format;
- to stop processing your data on the basis of our legitimate interests;
- to withdraw any consent you have given.
To make a request, write to support@magicesim.store from the email address the request concerns. We may ask you to confirm your identity before we act. Requests are free of charge.
We answer within 10 working days; where the law allows, we may extend this once and will tell you why. We block data within 3 working days of a justified request.
You can complain to the State Audit Office of Georgia (sao.ge) or to a court. If you are in the European Union, you can also complain to the data protection authority of your country. If you are in New Zealand, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
8. Security
We use encrypted connections (HTTPS), limit access to the people who need it, and do not collect payment data. No method of transmission or storage is completely secure.
9. Children
The international website is not intended for people under 18. We do not knowingly collect personal data from children; if we learn that we have, we delete it.
10. Changes to this policy
When we change this policy, we publish the new version on this page with its effective date. Every version is also kept unchanged at its own permanent address, linked at the top of this page. Before online purchases open on the international website, we will publish a new version that covers orders and payments (section 11).
11. When online purchases open
This section describes processing that does not take place today. It will begin only when online purchases open on the international website, and only after we publish the new version of this policy that describes it in full.
- Your order: your email address, the plan, the price and the language of the page, to deliver the eSIM and to answer questions about the order.
- Your checkout statements: the versions of the Terms of Service and the Refund Policy you accepted, the statements you made at checkout and the time we received them.
- Payment: a payment service will process your payment. We will name it, and say what it receives, before it is used. We will not receive or store your full card number or security code.
- Delivery: the eSIM is sent to your email address through an email delivery service, which we will name.
- eSIM service providers: to issue your eSIM we will send our eSIM service provider our order reference and the plan, not your name or email address.
Retention periods for order records will be stated in that version.
12. Contact
Individual Entrepreneur ALEKSANDR KHARIN (Magic eSIM), Georgia
support@magicesim.store