SimVala
Legal

Privacy Policy

Last updated 26 September 2026

SimVala is built to know as little about you as possible. This Policy lists exactly what we process, why, who else handles it, and the rights you have.

The short version

  • We never ask for your name, email, phone number, or card.
  • Your login is an account number we store only as a hash.
  • We keep your balance, your orders, and the crypto payments you send us.
  • No analytics, no ad trackers, and we never sell data.
  • Identity documents only where a country requires them, for that order.
  • You have full GDPR rights, including a complaint to the Swedish regulator.

This summary is here to help you read. The full text below is what applies.

1.Who is responsible for your data

In short: SimVala Ltd in Sweden is the data controller.

The controller of your personal data is SimVala Ltd (company number 559168-7008), Telefonvägen 50, 126 26 Hägersten, Stockholm, Sweden. Contact us about privacy at [email protected].

2.What we collect

In short: An account number (hashed), your balance and orders, your payments, and basic technical data.

  • Account data: your private account number, stored only as a one-way hash.
  • Balance and order data: your top-up history, balance ledger, and the products you buy.
  • Payment data: the cryptocurrency transactions you send to our addresses, such as amounts, transaction IDs, and sending addresses as recorded on the blockchain.
  • Verification data: identity documents, only where a country requires them for a specific order and only if you choose to provide them.
  • Technical data: IP addresses and similar request data, processed by our hosting and network providers to deliver the site and protect it from attacks.

3.What we do not collect

In short: No name, email, phone, card, billing address, or advertising profile.

  • Your name, email address, or phone number.
  • Card or bank details, since we accept crypto only.
  • A billing address.
  • Your wallet keys or seed phrase.
  • An advertising or tracking profile of your activity.

4.How we use it

In short: To run your account, deliver orders, stay secure, and meet legal duties.

We use this data to create and run your account, credit your top ups, process and deliver your orders, meet our upstream provider's compliance requirements where they apply, prevent fraud and abuse, keep the service secure, and respond when you contact support.

6.Who we share it with

In short: Only the providers needed to run the service. We never sell data.

We do not sell personal data, and we do not share it for advertising.

  • Our upstream telecom provider, with the minimum needed to fulfil your order, and verification data where a country requires it.
  • Our hosting provider, whose servers are in Germany.
  • Cloudflare, which provides our secure connection and protection against attacks, and processes technical request data to do so.
  • Authorities, only where we are legally required to.

7.International transfers

In short: Our servers are in the EU. Some network processing happens globally.

Our servers are in the EU. Cloudflare operates a global network, so technical request data may be processed outside the EU. Where that happens, we rely on the safeguards the GDPR requires for such transfers.

8.How long we keep it

In short: While your account is active and as the law requires. Blockchain records are permanent.

We keep account, balance, and order data while your account is active and for as long as the law requires, for example for accounting. Verification documents are kept only as long as needed for the order and our legal obligations, then deleted.

Crypto transactions are recorded on public blockchains by their nature. We cannot change or delete blockchain records, even where we delete our own copy of related data.

9.Cookies

In short: Only the cookies the site needs to work. No analytics or ad cookies.

We use only essential cookies, such as the cookie that keeps you signed in and your language preference. When you sign in, your browser also keeps an encrypted copy of your account number in a cookie that page scripts cannot read, so your dashboard can show it to you. Our servers never store the number itself. We do not use analytics cookies, advertising cookies, or third-party trackers. Our fonts are hosted by us, so loading a page does not call out to a font service.

10.Security

In short: Hashed logins, signed session cookies, and encrypted connections.

Your account number is stored only as a hash, your session is a signed cookie that page scripts cannot read, and the site loads over encrypted HTTPS. No system is perfectly secure, but we design to hold as little as possible. Our Security page explains this in more detail.

11.Your rights

In short: Access, correct, delete, restrict, or move your data, and complain to IMY.

Under the GDPR you can ask to access, correct, or delete your data, restrict or object to certain processing, and receive your data in a portable format. To make a request, email us with the order details shown in your dashboard so we can find your records. Never send your account number.

You also have the right to complain to a data protection authority. In Sweden this is Integritetsskyddsmyndigheten (IMY), and you can also contact the authority where you live.

12.Changes and contact

In short: If this Policy changes, the new version is posted here with a new date.

We may update this Policy. The current version is always on this page, with the date it was last updated. Privacy questions: [email protected].

Questions about this document

[email protected]

Send order details if relevant. Never send your account number.

SimVala Ltd

Company number 559168-7008, VAT SE949157700921

Telefonvägen 50, 126 26 Hägersten, Stockholm, Sweden