Cookie policy
Updated October 27, 2026. Cookies, browser storage and similar technologies can remember choices or transmit information. We classify each use by purpose, not an entire provider.
Your choice and control
Analytics and marketing are off until explicit consent, in every region. Scrolling, ignoring or closing a window is not consent. You can accept analytics only, accept all or reject all nonessential technologies. Purchases, sign-in, eSIM delivery, invoices and service messages continue as needed.
Acceptance and refusal are saved for six calendar months as a product choice, not a legal requirement. Minimal signed evidence stays in the browser, with no central consent database: random reference, time, language, choices and notice version. Prior acceptance is preserved upon withdrawal until its expiry. We do not collect email or full IP just for this evidence. It is not public; someone with access to your browser can view it.
Change your choice anytime through Cookie settings in the footer. Withdrawal stops future reporting and removes site-controlled nonessential tracking identifiers. Previously shared provider data is not automatically erased; contact support about existing data. Events blocked before consent are not queued or sent later.
Current and future tools
Google Analytics is installed (only after analytics consent). Not installed: Google Tag Manager, Google Ads, Meta Pixel, TikTok, ChatGPT Ads or Microsoft Clarity. There is currently an internal event component and affiliate/referral-link measurement. A new tool will be listed here and in the Privacy Policy with its provider, data, purposes and storage before activation. Unapproved tools or purposes remain off until appropriate consent. Cosmetic changes do not reset choices.
The list below covers site uses found in the code. Tracking added by the hosting platform or a provider outside the app code, and provider data retention, require separate verification; cookie lifetime is not provider data retention.
Cookie choice and evidence · Ziki eSIM
- Category
- Essential for this use
- Purpose
- Remember and honor acceptance or refusal
- Data
- Random reference, times, notice version, purposes and choices; no email or full IP for this evidence
- Activation
- After an explicit choice
- Browser storage lifetime
- Signed ziki_consent cookie and ziki_consent_state local storage; six calendar months
- Data retention
- Minimal browser evidence for six months; withdrawal preserves prior acceptance until its expiry
Sign-in and verification · Lovable Cloud / Google
- Category
- Essential for this use
- Purpose
- Customer account, password recovery and second-factor verification
- Data
- Session tokens and account information; Google only when selected for sign-in
- Activation
- When using an account or signing in
- Browser storage lifetime
- Session-token storage; refreshed while signed in, until sign-out or deletion
- Data retention
- Provider data retention is unverified and is not determined by cookie lifetime.
Security and site access · Cloudflare / Ziki eSIM
- Category
- Essential for this use
- Purpose
- Abuse prevention and access checks
- Data
- Request metadata, security-check result and access token
- Activation
- For requests or forms requiring protection
- Browser storage lifetime
- ziki_gate up to seven days; Cloudflare storage depends on the check and provider settings
- Data retention
- Provider data retention is unverified and is not determined by cookie lifetime.
Cart and payment · Ziki eSIM / PayPlus
- Category
- Essential for this use
- Purpose
- Complete the requested purchase, return from payment and prevent duplicate orders
- Data
- Plan and quantity, purchase-attempt reference, return path and transaction data; card details are processed by PayPlus
- Activation
- When adding to cart or starting a purchase
- Browser storage lifetime
- ziki_cart has no automatic expiry until cleared; purchase attempt and return path in tab storage; PayPlus-frame storage is provider controlled
- Data retention
- Provider data retention is unverified and is not determined by cookie lifetime.
Service and accessibility preferences · Ziki eSIM
- Category
- Essential for this use
- Purpose
- Chosen language, currency, accessibility and panel state
- Data
- Language/currency codes, accessibility settings and panel position
- Activation
- To remember choices and present the service
- Browser storage lifetime
- ziki_locale one year; ziki_currency, ziki-a11y and panel preferences until deletion; promo dismissal for the tab
- Data retention
- Browser preferences only; no advertising reporting
User-requested support · Ziki eSIM / Lovable Cloud / OpenAI
- Category
- Essential for this use
- Purpose
- Conversation continuity and chosen text or voice assistance
- Data
- Secure guest token, ticket, messages and service context; voice only after a call request
- Activation
- When requesting support; continuity token as needed
- Browser storage lifetime
- Signed HttpOnly ziki_guest; sign-in handoff in the tab up to 15 minutes; guest transcript is not stored in the browser
- Data retention
- Provider data retention is unverified and is not determined by cookie lifetime.
Delivery and service messages · Stellar / eSIM Access / Resend / PayPlus Invoice+
- Category
- Essential for this use
- Purpose
- eSIM issuance, usage, QR, invoices and service updates
- Data
- Order/contact details needed for delivery; ICCID, installation code, usage and transaction documents
- Activation
- After a verified action, as required for the purchased service
- Browser storage lifetime
- Server service records; not advertising cookies
- Data retention
- Provider data retention is unverified and is not determined by cookie lifetime.
Fonts and images · Google Fonts / FlagCDN / Lovable Assets
- Category
- Essential for this use
- Purpose
- Display site content
- Data
- Resource-request metadata such as IP and browser; not site advertising events
- Activation
- When a page displays a resource
- Browser storage lifetime
- Browser cache according to response headers; provider storage duration is unverified
- Data retention
- Provider data retention is unverified and is not determined by cookie lifetime.
Referrals and benefits · Ziki eSIM
- Category
- Essential for this use
- Purpose
- When you enter ZIKI through a friend or partner link, a minimal referral reference is kept to apply the benefit and credit the referrer after a qualifying purchase. It is not used for personalised advertising or cross-site tracking. You can buy without a referral link, but deleting it from the browser before it is recorded on an account or order may prevent the benefit or attribution.
- Data
- Referral code and a random first-party ZIKI service reference; no referrer name, email or phone, never shared with ad platforms
- Activation
- On arrival through a valid friend or partner link, after server validation; unaffected by refusing non-essential cookies. A newer valid link replaces the previous one
- Browser storage lifetime
- ziki_benefit_aid and ziki_benefit_ref for the existing attribution window (default 30 days); on signup or order the linkage is recorded on the account/order. Friends or partners see only limited reward/commission data, never customer identifiers
- Data retention
- After redemption, order, commission and benefit records are service records; refunds or cancellations reverse or adjust the reward, and self-referral and duplicate benefits are blocked
Site-action measurement · Ziki eSIM
- Category
- Analytics - consent required
- Purpose
- Consented measurement of searches, plan selection and site actions; no external analytics provider is currently connected
- Data
- Action name and bounded parameters without contact details; no pre-consent event collection
- Activation
- Only after analytics consent; no external transmission without a connected provider
- Browser storage lifetime
- No analytics cookie is currently installed; no event queue
- Data retention
- This component has no active measurement store or external destination
Google Analytics · Google
- Category
- Analytics - consent required
- Purpose
- Visit, page and purchase-step statistics, without contact details
- Data
- Page views, bounded action parameters, device and browser data; no name, email or phone
- Activation
- Only after analytics consent; loaded only then and stopped on withdrawal
- Browser storage lifetime
- _ga and _ga_* cookies up to two years, removed on withdrawal
- Data retention
- Data held by Google per account retention settings (default 2-14 months)
Affiliate and referral-link measurement · Ziki eSIM
- Category
- Marketing - consent required
- Purpose
- Consented landing measurement and marketing attribution; not personalized advertising
- Data
- Code, random reference, path and campaign tags; affiliate links also hash IP and browser
- Activation
- Only on a new arrival with valid marketing consent; blocked arrivals are never replayed
- Browser storage lifetime
- ziki_aid, ziki_ref, ziki_click_id up to the attribution window (default 30 days)
- Data retention
- Attribution expiry does not delete records; server click cleanup is not currently scheduled and retention needs confirmation
Benefits and separate consent
Arriving through a benefit link is not tracking consent. You can separately save the benefit code for redemption and referrer credit, without click data or campaign tags. Without marketing consent, visits are not measured. Without separate benefit saving or permitted attribution, no new automatic attribution is created; manually entered coupons can still be checked. Rejecting tracking does not cancel commissions or benefits already legitimately recorded on an order.
Cookie consent is not consent to terms, registration or email/SMS advertising. Each is chosen separately. You can also delete site data in your browser; deleting essential storage may sign you out or clear a saved cart.