Who is responsible
Cruise eSIM is operated by Punivox OÜ, an Estonian private limited company, registry code 17508949, registered on 18 May 2026. Registered address: Ruunaoja tn 3, Lasnamäe linnaosa, 11415 Tallinn, Harju maakond, Estonia. Contact support@cruiseesim.com for privacy requests.
Information we use
We process your email and verified account identity; billing country, plan, ship, sailing date, device quantity, payment references and order history; eSIM installation details; support messages; referral/partner attribution and payout information if you participate. Stripe handles card information: we do not store full card numbers or CVCs. Please do not put card details, passwords or activation codes in support messages.
Why we use it
Account access, payment, manual fulfillment, receipts and support are necessary to perform your contract or take steps you request before a purchase. Accounting records are retained to meet legal obligations. We use limited operational logs, security controls and fraud checks for our legitimate interests in protecting customers and operating the service. We retain unfinished checkout details to provide checkout assistance, not as permission to send marketing. Optional marketing requires a separate lawful basis and unsubscribe mechanism; we do not automatically subscribe purchasers.
Service providers and transfers
Supabase provides account/database services, Stripe payment processing, Resend transactional email delivery, and Cloudflare website hosting and network protection. A connectivity supplier receives only information needed to issue or operate your chosen eSIM. Authorized staff manually prepare eSIM delivery. Providers may process information outside the EEA; applicable safeguards include adequacy decisions and standard contractual clauses where required. Contact us for details of relevant recipients and safeguards.
Retention
Unfinished checkout leads are deleted after 90 days of inactivity. Transactional email queue records are retained for up to 90 days after completion; limited provider delivery logs follow the provider retention settings. Support cases are normally retained for 24 months after resolution, unless needed for an active dispute. Order, receipt and accounting records are retained for the statutory accounting period, normally seven years under Estonian accounting requirements. Activation credentials are deleted after expiry and the support/dispute retention period, normally within 90 days of expiry. Account deletion does not require destruction of records we must legally keep; we restrict and minimize them.
Cookies and local storage
We use essential session cookies, a short-lived checkout session and browser storage to retain your selection. If you allow referral attribution in Privacy preferences, a referral/affiliate link can store attribution for the program window described on the Rewards pages. You can withdraw that choice and clear attribution cookies there at any time. These links do not use advertising networks. Planning tools run locally. Optional analytics are explained below and stay off unless you choose to allow them.
Optional analytics
If you allow analytics in Privacy preferences, PostHog counts visits and records masked sessions on public pages to help us understand which guides and planning tools are useful. Events include page paths and basic browser and device information. Recordings show page layout, navigation and pointer activity; inputs and page text are masked. We exclude query strings, account identities, form contents, payment details and eSIM credentials. Account, sign-in, checkout, rewards, admin and contact pages are not recorded. Console logs, network request bodies and automatic form capture are disabled. Analytics and referral attribution are separate choices. Withdrawing analytics stops events and recordings and clears PostHog’s browser identifiers. Your consent preference stays in browser storage so we can respect it on future visits.
Your choices and rights
You may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. Withdraw consent at any time where consent applies. Email support from your account address; we may verify identity before releasing information. We normally respond within one month and will explain any lawful extension. You can complain to Estonia’s Data Protection Inspectorate (Andmekaitse Inspektsioon), or your local supervisory authority. We do not make solely automated decisions with legal or similarly significant effects.
Policy version
Effective 30 October 2026. Material changes will be communicated where required.