Last updated: October 7, 2026
Short answer
We use Google Analytics, which sets cookies, to count visits and see which pages people read. We use it for statistics only and have turned off its advertising features. We also load a script from Travelpayouts, an affiliate network, which can turn links to travel brands into affiliate links and show travel offers. When you click through to an eSIM provider we count the click without storing your IP address. If you send us a message, we keep your name, email and message to reply to you and delete them after 12 months. We never sell personal information.
Who we are
Island eSIM (islandesim.com) is an independent website that compares travel eSIM plans. In this policy, “we” and “us” mean Island eSIM.
Questions about your data go to [email protected] or through our contact form.
What we collect and why
When you browse the site
We use Google Analytics 4 to see how many people visit, which pages they read and how they found us. Google Analytics sets cookies (named _ga and _ga_ followed by a code) that tell visits from the same browser apart. It collects:
- the pages you view and how long you stay
- the page or search engine that sent you here
- your device type, browser, screen size and language
- your approximate location (country and city), worked out from your IP address
- clicks on links to eSIM providers: which provider and plan, and where on the page the link was
Google Analytics doesn’t log or store IP addresses. The reports show us totals, not individual visitors. We’ve turned off Google signals and every advertising feature, so the data isn’t linked to your Google account or used to show you ads. We keep it for 2 months, after which Google deletes it; only the totals stay.
To opt out, block cookies for this site in your browser, use a content blocker, or install Google’s opt-out add-on. The site works the same without them.
Travelpayouts Drive
Our pages load Drive, a script from the affiliate network Travelpayouts. It can turn plain links to travel brands into affiliate links, add its own links or travel offers to a page, and show offers again to visitors who were looking at them. To do this, Travelpayouts receives your IP address, browser and device details and the pages you view, and it may set cookies so a later booking can be credited to us. Travelpayouts decides how this data is used, under its own privacy policy. A content blocker stops the script; the comparison tables work the same without it.
We don’t sell ad space, and we don’t set any other cookies of our own.
Like every website, our hosting provider and content delivery network receive your IP address and basic request details (page, browser type, time) when you load a page. They use this to deliver the page and to block attacks. Cloudflare may set a strictly necessary security cookie to tell people from bots.
When you click a link to a provider
Links to eSIM providers go through an address on our site starting with /go/. Each click records:
- which provider and plan you clicked, and on which of our pages
- the date and time
- a one-way code made from your IP address and browser type, which changes every day
We never store your IP address itself, and the code can’t be turned back into it. We use these records to count clicks per page and provider. When you use the “Copy” button on a discount code, we record the copy in the same way. The button only writes the code to your clipboard; we never read what’s on it.
After the redirect you’re on the provider’s website. The provider, or the affiliate network it uses, may set its own cookies so the sale can be credited to us. Their privacy policy applies from that point.
When you buy an eSIM
You buy from the provider, not from us. We never see your payment details, your order or your phone number. Read the provider’s privacy policy for how it handles them.
When you contact us
Our contact form asks for your name, email address, a topic and your message. We also note which page you sent it from. We use this only to reply to you and, if you reported a mistake, to fix it.
To stop spam, the form keeps a one-way code of your IP address and browser for one hour, so the same visitor can’t send more than a few messages an hour.
The form also uses Cloudflare Turnstile to check that you’re a person and not a bot. The check runs in your browser and sends technical signals, including your IP address and browser details, to Cloudflare. Cloudflare uses them to run the check and to improve its bot detection. See the Turnstile privacy notice.
If you email [email protected] directly, Cloudflare forwards the message to our inbox.
How long we keep it
- Contact form messages: 12 months, then deleted automatically. Sooner if you ask.
- Emails: as long as needed to deal with your question, then deleted.
- Click and discount-code records: kept for our statistics. They don’t identify you.
- Google Analytics data: 2 months, then deleted by Google. Totals are kept.
- Hosting and Cloudflare logs: kept by those providers under their own policies.
Who we share it with
We don’t sell, rent or trade personal information. Apart from Travelpayouts Drive (above), we don’t share it for advertising.
Four services process data for us:
- Hostinger hosts the website and its database. Hostinger privacy policy
- Cloudflare delivers and protects the site, runs the spam check on our contact form and forwards email sent to our domain. Cloudflare privacy policy
- Google runs Google Analytics for us. How Google uses data from sites that use its services
- Travelpayouts runs the Drive script described above. Travelpayouts privacy policy
These services may process data outside the country you’re in. We may also disclose information if the law requires it, or to protect our rights or someone’s safety.
We don’t embed videos, maps, social media widgets or ads (Drive’s travel offers aside), so apart from these four services no other company receives data from you while you’re on our pages.
Your rights
You can ask us to:
- send you a copy of the personal information we hold about you
- correct it
- delete it
- stop using it for a particular purpose
Email [email protected] or use the contact form. We’ll reply within 30 days. We can’t find click records or Google Analytics data for you, because they contain nothing that identifies you. To stop Google Analytics, use the opt-out options above.
If you’re unhappy with how we’ve handled your information, you can also complain to the data protection authority where you live. In Bermuda that’s the Office of the Privacy Commissioner.
Security
The site is served only over HTTPS. Access to the database and to messages is restricted and protected by strong passwords, and the software is kept up to date. No website can promise perfect security, but we keep as little personal information as we can, so there’s little to lose.
Children
This site isn’t aimed at children under 16, and we don’t knowingly collect their information. If you think a child has sent us personal information, contact us and we’ll delete it.
Changes to this policy
If we change what we collect, for example by adding a newsletter, we’ll update this page and the date at the top before the change goes live.
Laws this policy follows
This policy is written to meet Bermuda’s Personal Information Protection Act 2016 (PIPA) and the principles of the EU and UK General Data Protection Regulation (GDPR).
See also our terms of use and affiliate disclosure.