What we collect, and what we do not
Privacy
We do not sell personal data, and we ask for as little of it as a comparison site can operate on.
Overview
What this site collects, which is less than most. There are no accounts, we take no payments, and we run no third-party analytics or advertising scripts.
When you click through to a provider
Outbound links pass through /go/, which records the click so we can measure which listings are useful and check that advertised prices survive to checkout. Each click stores a random identifier, the plan and provider, the page you came from, the position and sort order of the row, the price we showed you, any promo code applied, a two-letter country code supplied by our CDN, and whether the device is mobile or desktop.
It does not store your IP address, your full user agent, or any identifier that follows you between sessions. The random click identifier is passed to the provider so a purchase can be attributed to us; from that point their own privacy notice governs what happens, and we never receive your payment details.
Click records are deleted after 90 days.
If you submit a review
We store the name you type, your rating and your text. We also store a one-way hash of your IP address and browser string — not the address itself — solely to rate-limit submissions and stop the same person rating one provider repeatedly. The hash cannot be reversed to recover your address.
Reviews are published only after a person approves them. Type a name you are happy to see in public: whatever you enter is displayed as written.
Cookies
Browsing this site sets no advertising or analytics cookies. WordPress sets a session cookie only if you log in to the administration area, which readers have no reason to do. If spam protection is enabled on the review form, Cloudflare Turnstile may set a short-lived cookie when you submit one.
Who processes data for us
Our hosting provider and CDN, which see requests in the ordinary course of serving pages, and Cloudflare Turnstile where spam protection is enabled. Providers you click through to are independent controllers, not our processors.
Your rights
If you are in the UK, EU or another jurisdiction with equivalent law, you may request access to, correction of, or deletion of your personal data, and object to processing. Our lawful basis for click records and review rate-limiting is legitimate interest — operating and measuring the site and preventing abuse; for publishing a review it is your consent, given by submitting it.
In practice the only data we hold that could identify you is a review you chose to publish, since clicks carry no identifier that points back to a person. To have a review removed, or to raise a complaint, contact: support@esimaddict.com
You also have the right to complain to your national data protection authority.
Data controller
TO BE COMPLETED BY THE OPERATOR