Cookie Policy
Last updated: October 20, 2026
What cookies are
Cookies are small files a website stores in your browser. We also use your browser's local storage for a few items. Both are covered here.
Necessary (always on)
These are needed for the site to work, so they can't be switched off:
- __Host-session: keeps you signed in to My eSIMs. 30 days.
- consent: remembers your cookie choices. 6 months.
- NEXT_LOCALE: remembers your language. Until you close the browser.
- currency: remembers the currency you picked. 1 year.
- order.… (local storage): lets this browser open your order page. Until you clear it.
- device (local storage): a random identifier for this browser, used for purchase limits. Until you clear it.
- __stripe_mid, __stripe_sid (Stripe, on the checkout page): fraud prevention. 1 year and 30 minutes.
- __cf_bm (Cloudflare): bot protection. 30 minutes.
- Cloudflare Turnstile (on checkout and sign-in): checks that you're not a bot. Cloudflare may set its own short-lived security cookies for this.
Analytics
- _ga, _ga_… (Google Analytics, only with your consent): count visits and show which pages are used. Up to 13 months.
- Cloudflare Web Analytics (no cookie): counts visits and measures how fast pages load, without storing anything in your browser. In the EU/EEA, the UK, Switzerland and Turkey it runs only if you allow analytics; elsewhere it runs unless you turn analytics off. It never runs on the checkout, order and account pages.
- conv.… (local storage, only if you allow analytics or advertising): makes sure a purchase is counted only once. Until you clear it.
- promo (local storage, only if you allow analytics): an event discount code you opened, kept in your browser so it's ready at checkout. Up to 30 days.
Advertising (only with your consent)
- _gcl_au, _gcl_aw (Google Ads): measure which ads lead to purchases and may be used to personalise ads. 90 days.
How consent works
Until you choose, Google's code isn't loaded at all. If you allow analytics or advertising, we load it and tell Google which categories you allowed (Google Consent Mode). For a purchase we send Google only the order reference, amount and currency, never your email address or eSIM details. If your browser sends a Global Privacy Control (GPC) signal, advertising stays off; you can still allow or refuse analytics. Cloudflare Web Analytics follows your analytics choice. We tell which rule applies from the country your IP address points to; if we can't tell, it waits for your consent.
Changing your choices
You can change your choices or withdraw your consent at any time with the "Cookie settings" or "Your Privacy Choices" link at the bottom of every page. We ask again after 6 months, or sooner if we change the categories. You can also delete cookies in your browser settings.
More information
See our Privacy Policy or contact us at support@lumsim.com.