Privacy policy

Tsernskin keiys OÜ, a company registered in Estonia (registry code 17587191), registered office at P. Kerese tn 17-20, 20309 Narva, Ida-Viru maakond, Estonia, is the controller of the personal data described here. Reach us at support@roamline.online or through the contact form.

• Account: your name, email address and a hashed password.
• Orders: the plans you buy, their eSIM identifiers (ICCID) and activation strings, data-usage readings and order status.
• Payments: the status and reference of each card payment. We never store card numbers.
• Balance: every top-up, purchase, refund and credit on your ledger.
• Trips: countries and dates from your purchases and from trips you add yourself.
• Messages: what you send us through the contact form.
• Account notices: records of notices generated for your account, such as a low-data warning.

We do not buy or sell personal data, and there is no advertising or analytics tracking on Roamline.

• To sell and deliver eSIM plans, keep your balance and handle refunds and credits (performance of our contract with you).
• To run your account, trip archive and day counter (contract).
• To keep accounts secure and refuse sign-ups from sanctioned jurisdictions (legal obligation and legitimate interest).
• To answer messages you send us (legitimate interest).

• Our payment institution, for card payments.
• Our eSIM provider, to issue profiles and read data usage.
• Our hosting, database and job-scheduling providers, which run the service.

Each is bound by a data-processing agreement and uses the data only to provide its service to us.

• Passwords are hashed with bcrypt (cost 12); we never see or store them in readable form.
• Sessions are signed tokens, and 'Sign out everywhere' in Settings ends all of them at once.
• Every data query is scoped to your account, so one account cannot read another's data.
• A card number for a top-up travels over TLS straight to the payment institution and is never stored or logged. There are no saved cards and no automatic charges.

Our database and application servers are in the eastern United States. If you are in the European Economic Area, your data is transferred there under standard contractual clauses approved for that purpose.

We keep your data for as long as your account exists. Deleting your account removes your orders (including ICCIDs), trips, ledger, usage readings, payment records, account notices and contact messages immediately and permanently.

You can download everything we hold as a JSON file, or delete your account, yourself from Settings → Account & data.

You can also ask us to give you access to, correct, restrict or transfer your data, or object to how we use it, through the contact form. We respond within one month.

You can complain to a data-protection authority. Our supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee); you can also complain to the authority in the country where you live or work.

Roamline uses cookies to keep you signed in, to remember your cookie choice and, if you allow it, to remember your display currency. The Cookie policy lists each one, and 'Manage cookies' in the footer changes your choice at any time.