Privacy policy

Who we are

QuikRoam is operated by Syntropy Solutions, LLC, a limited liability company registered in Delaware, USA, at 131 Continental Dr, Suite 305, Newark, DE 19713. It decides how your data is used and is responsible for it. Write to [email protected] about anything on this page.

What we collect, why, and on what basis

We collect only what selling and running an eSIM needs.

• To sell and deliver your eSIM: your email address, what you ordered, the language you bought in, and the eSIM's own identifiers and install codes. Basis: our contract with you.
• To take payment: Stripe collects your card and billing details on its own page. We receive the result, the amount, the tax and the currency, never your card number. Basis: our contract with you, and the law that requires sales records.
• Automatic top-up, if you switch it on or tick it at checkout: Stripe keeps the card you save for it, and we keep only Stripe's reference to that card, so we can charge it when your data runs low. Switching it off removes the card. Basis: your request.
• To stop fraud: your IP address is used to limit repeated attempts and is passed to Stripe with the payment. We do not store it in our database. Stripe also gives us a fingerprint of the card used, a code that tells two cards apart and cannot be turned back into the card number; we keep it with the order and with any payment that was refused, to notice one card used across several accounts. Basis: our legitimate interest in not selling to stolen cards.
• To run your plan: how much data is left, when the plan ends and whether the eSIM is installed, read from our network partner so we can show it under My eSIMs and warn you in time. Basis: our contract with you.
• Emails about your order: your eSIM, your receipt, refund confirmations, sign-in links, and notices that data is running low, a plan is ending or an eSIM is not installed yet. Basis: our contract with you.
• Optional emails: a request for a review, one reminder if you entered your email at checkout and did not finish paying, one note after a plan has ended, one note if store credit you hold has gone unused for a while, and news about a friend you referred. Basis: our legitimate interest in hearing how it went and in finishing an order you began. Every one of these emails has a link that stops them, and so does My eSIMs.
• Counting visits: the page, the site or campaign link you came from, your language, whether you are on a phone or a computer, an approximate country and how fast the page loaded. A visit is tied only to a code made from your IP address and browser that changes every day, so visits cannot be linked from one day to the next, and the IP address itself is not kept. No cookies are used. Basis: our legitimate interest in knowing which pages work. The same kind of count, made the same cookieless way, also goes to PostHog (see below), together with the steps of an order (started, paid, delivered, refunded) under an internal number that does not reveal who you are. You can switch both off for your browser below. The same daily code decides which of two versions of the checkout page you see when we compare them; your order records the version, not the code.
• Where an order came from: the site or campaign that brought you is noted on your order.
• Prices in your currency: the country your connection comes from decides which currency the price hint uses. It is used for that answer and not kept.
• Reviews and business requests: a review you write under My eSIMs is kept with the name you chose and shown on the site only after we approve it; you can ask us to remove it at any time. A request sent through the Business or Affiliate program page is kept with your email address for up to three years so we can answer and follow up.
• Sending an eSIM to someone else: the address you type is used to send that one email and is not kept. Send it only to someone who expects it.
• Gift cards, if we offer them: when you buy one we keep your email address, the address you send it to, your message and the payment, for the sales records, and email them the code. We keep only a scrambled form of the code and its last four characters. When someone redeems it we note which account did. Basis: our contract with you, and the law that requires sales records.
• Answering you: when you write to us through the help page or the chat we keep your message, your email address and our answer. The chat keeps the number of your conversation in your browser so you can come back to it; nothing else is stored there. If you write from an order or from My eSIMs, the message is linked to that order and eSIM so we can see its plan and data. Screenshots you attach are stored with their location and camera details removed. While you type, the form suggests guides that may answer your question; that matching happens in your browser and nothing you type is sent until you press send. We count only whether suggestions were shown, opened or followed by a message, with no text and no visitor code. Basis: our legitimate interest in answering and in having a record of what we said.
• Undelivered email: when an email to you comes back from your mail provider we record that it did, and stop sending optional emails to that address.
• Keeping the service working: server logs, with email addresses masked, and a record of what happened to each order, including which emails were sent. Basis: our legitimate interest in finding and fixing problems.

Who receives your data

We do not sell your data. It is shared only with the companies that help us provide the service:

• Stripe, Inc. (USA): payment and fraud screening. Stripe keeps its own payment records under its own privacy policy.
• eSIM Access, our network partner: the plan we order for you and the eSIM's identifiers. It does not receive your email address. The mobile networks your eSIM connects to see its traffic as any network does.
• Cloudflare, Inc. (USA): delivers and protects the site, and stores our database backups.
• Our server hosting providers: run the site, the database and our own mail server, which sends our emails.
• Google and Microsoft, only if we offer "Continue with Google" or "Continue with Microsoft" and you choose it: they confirm your email address to us when you sign in. We receive the address and your name, nothing else, and keep only the address.
• PostHog (EU cloud, when in use): counting visits and which steps of buying work, without cookies, with no address, no order link and nothing typed into a form; addresses of pages are sent without their query string or ids.
• Slack (USA), when in use: alerts to our own staff, with order numbers and amounts and no customer addresses.

Where your data is processed

Syntropy Solutions, LLC is in the United States, and the companies above operate there and in other countries. Stripe and Cloudflare commit to the European Commission's standard contractual clauses in their data processing terms for transfers out of the European Economic Area, the United Kingdom and Switzerland.

How long we keep it

• Paid orders and their amounts: as long as tax law requires, at least seven years. If you delete your account, the order stays without anything that identifies you.
• The record of what happened to an order, including emails sent: 400 days. What our staff did on an order or an account (a refund, a note, a block): as long as the sales record itself.
• Server logs: 90 days.
• A payment that did not go through (a refused card, or a payment page left until it expired), with the reason Stripe gives and never the card itself: 400 days.
• The card's fingerprint kept with an order: 400 days, then removed from the order; at once if you delete your account.
• Visit records: 400 days.
• An email address typed at checkout or sign-in with no order behind it: 30 days.
• Messages you send us through the help page: three years after we answer them.
• Images you attach to a message to support: kept with their location and camera details removed, seen only by you and our support staff, and deleted 90 days after we answer, or at once if you delete your account.
• Sign-in links: valid for 15 minutes, deleted a day later.
• Backups: up to 365 days. Something deleted today leaves the last backup within that time.

Cookies and what is stored in your browser

QuikRoam sets one cookie, qr_session, to keep you signed in on the account page. Only while we offer "Continue with Google" or "Continue with Microsoft" and you choose it, a second one, qr_oidc, lasts at most ten minutes: it lets us check that the answer from Google or Microsoft belongs to the sign-in you started, and it is deleted as soon as that answer arrives. We use no advertising or analytics cookies. Your browser also remembers four things for us, and they never leave it except as described: the light or dark theme you chose, the partner or friend link you arrived through (for 30 days, so a discount still applies at checkout), your choice not to be counted, if you made one, and, if you write to us in the chat, the number and key of that conversation, so you can come back to it from the same browser.

Children

QuikRoam is not meant for anyone under 16, and we do not knowingly collect their data.

Changes

Last updated 28 October 2026. When this page changes in a way that matters, the date changes with it.