Cookies and browser storage
Only necessary technical storage is used. No advertising or analytics is connected.
1. Website sign-in
esims_login is a random sign-in challenge secret lasting five minutes. esims_link is a five-minute secret binding a Telegram link request to the current account. esims_session is a random session token lasting up to 30 days. Cookies are HttpOnly, SameSite=Lax and Secure on HTTPS. Their server-side tokens are hashed. Sessions are created after registration, checking email/password credentials, or confirmed Telegram sign-in. This does not verify ownership of an email address.
2. Mini App
The Mini App sends Telegram's signed launch data to the server once to establish a session. Its access token stays in application memory, not localStorage, and expires after eight hours. Reopen the app to sign in again. Telegram's own storage and policies also apply.
3. Preferences
esims-theme and esims-storage-notice store your theme and acknowledgement of the storage notice until cleared. sessionStorage may contain a pending order attempt ID until the tab closes. The chosen bot language is stored with your Telegram account.
4. Control
Sign out in your account. Clearing cookies ends website sign-in but does not remove your account. Request account deletion through support. Separate consent choices will be added before any optional tracking is introduced.