Cookie Policy

1. What cookies are

A cookie is a small text record a website asks your browser to keep and send back on later visits. "Local storage" is a similar mechanism that the page reads itself and that is never sent to a server. This policy covers both, and any similar technique (a pixel, an SDK) we might use later; today it is only the items in section 3.

2. What we use them for

• To keep you signed in between pages and visits.
• To remember your cart while you decide.
• To honour a referral link, so the discount and the commission can be applied to your order.
• To protect the checkout from automated abuse.
• To take your payment on the payment provider's page.

We do not use cookies for advertising, for tracking you across other websites, or to build a profile of you. We do not currently run a third-party analytics service; if that changes, this policy will list it and non-essential analytics will be off until you turn it on.

3. The cookies and storage items we use

Strictly necessary — set by the Site

• esn_session (cookie) — your sign-in session. Set when you sign in or when a checkout signs you in as the email you typed; lasts for the length of the session; removed when you sign out or it expires. Without it, the account pages cannot work.
• __attr (cookie) — the referral code and click identifier from a referral link, signed so it cannot be altered. Set only when you arrive through such a link; lasts 30 days. Without it, a referral discount cannot be applied.
• esn_cart_v1 (local storage) — the contents of your cart: which plans and how many. Stays until you clear it or complete the order; never leaves your browser.

Security — set by a provider on our behalf

• Cloudflare Turnstile — on the checkout page, to tell a person from a bot without a puzzle. Turnstile may set its own cookies for that purpose; they are governed by Cloudflare's privacy policy.

Payment — set by the payment providers

• Stripe and PayPal set cookies on their own pages and, for fraud prevention, may set some on ours during checkout. They are governed by those companies' policies, and the checkout cannot work without them.

Sign-in — set by Google

• If you choose "Continue with Google", Google sets cookies as part of its sign-in flow, under Google's policy. Nothing is set if you do not use it.

Your language is part of the address (for instance /zh/…), not a cookie, so switching language stores nothing.

4. How to control them

• In your browser. Every browser lets you see, delete and block cookies and site data; look for "Cookies and site data" in its settings, or the help pages for Chrome, Safari, Firefox or Edge. Blocking the strictly necessary items above will sign you out and empty the cart, and a blocked referral cookie means the discount is not applied.
• Private browsing. In a private window the items above are removed when the window closes. The Site works, but your cart and sign-in do not survive the session.
• Referral links. If you would rather not carry a referral, simply do not open the link, or delete the __attr cookie before you buy.
• "Do Not Track" and Global Privacy Control. Because the Site sets no tracking cookies, there is nothing for these signals to turn off; we treat them as a request not to be tracked, which is already the case.

5. How long they last

Session items disappear when the session ends; the referral cookie expires 30 days after it was set; the cart stays until you clear it or check out. A provider's cookie lasts as long as that provider's policy says. We review this list when the Site changes and remove anything no longer used.

6. Cookies and personal data

A session cookie identifies your account, and the referral cookie can be linked to your order; both are personal data and are handled as the Privacy Policy describes, under the Personal Data (Privacy) Ordinance of Hong Kong. The cart in local storage is not sent to us at all until you place the order.

7. Changes to this policy

If we add a cookie, or add a service that sets one, we update this list and the date at the top before it goes live. A cookie that is not necessary for the Site to work will be off until you agree to it.

8. Contact us

Questions about cookies, or about exercising any right in the Privacy Policy, go to eSIM Now Limited at supper@eSIM.Now.