Privacy is the default here
SimVala is built so your connectivity is not tied to your identity. You pay in crypto with no card and no ID, your login is an account number we store only as a hash, and we keep no name and no email. Here is exactly what we store, how it is protected, and how to keep your side safe.
What we store, and what we never hold
The most private system is the one that never holds your data in the first place. This is the complete list.
What we keep
- Your account number, as a one-way hash only
- Your balance and top-up history
- What you bought, so we can deliver it
- The on-chain transactions you sent to our addresses
- Identity documents only where a country requires them for a specific order
What we never hold
- Your account number in readable form
- Your name, email, or phone number
- Card or bank details, since we take crypto only
- A billing address
- Your wallet keys or seed phrase
- Your real number on the apps you verify
How your account number is protected
Random and long
Every account number is 24 characters drawn at random, about 120 bits of randomness. It is shown to you once, when it is created.
Stored only as a hash
We run it through SHA-256, a one-way function, and keep only the result. When you log in, we hash what you type and compare. The number itself is never saved.
A signed, locked-down session
Once you log in, your session is a cryptographically signed cookie marked httpOnly, so scripts on the page cannot read it, and secure, so it only travels over HTTPS.
How hard is it to guess one?
There are about 1.3 × 1036 possible account numbers. At a billion guesses a second, finding one would take roughly 40 billion billion years, about three billion times the age of the universe.
…
Change one character and the hash changes completely, and there is no way to turn a hash back into the number. This demo runs only in your browser; nothing is sent.
The trade-off, honestly
How payments stay safe
No card data, ever
We do not accept cards, so there is no card number to store, leak, or be charged against later.
Your keys stay yours
You send from your own wallet to the address we show. We never see, need, or ask for your keys or seed phrase.
Prices set on our server
Every price is calculated on our server when you buy. The page never sends a price, so it cannot be tampered with in the browser.
Monero for private payments
Monero hides the amount and the addresses on chain by default. It is the most private of the nine coins we accept.
No trackers watching you shop
No tracking scripts
No analytics, advertising, or tracking pixels are added to the site.
Functional cookies only
Just what the site needs to work, like your session and language.
HTTPS everywhere
Every page and payment screen loads over an encrypted connection.
Servers in Germany
Our servers are in the EU, with Cloudflare in front, like most of the web.
Four habits that keep you safe
- 1
Save your account number safely
Store it in a password manager. It is your only way in, and it cannot be recovered.
- 2
Never share it
Anyone who has your account number can use your balance. Support will never ask for it.
- 3
Match the address and network
Send crypto only to the address on the payment screen, on the exact network it names.
- 4
Treat QR codes and numbers like keys
Do not post screenshots of your eSIM QR code or your virtual number's codes.
How to spot a fake SimVala
We never ask for
- Your account number
- Your seed phrase or private keys
- A payment outside the checkout
The only real address
Log in and pay only at simvala.com. Check the address bar before you type your account number.
The only support contact
Support is [email protected]. Send your order details, never your account number.
Who stands behind SimVala
Privacy-first does not mean faceless. SimVala is operated by SimVala Ltd, a registered company in Stockholm, Sweden (company number 559168-7008, VAT SE949157700921), with published terms, a privacy policy, and a clear refund policy.
Security and privacy: FAQ
Does SimVala require ID?+
No. There is no ID to top up or buy. A document check applies only to certain regulated products in a few countries, and only for that specific order.
What data does SimVala keep?+
The minimum to run your account: a private account number stored only as a hash, your balance and top-up history, what you bought, and the on-chain transactions you sent us. No name, no email, no card, no billing address.
How is my login protected?+
Your account number is 24 random characters, about 120 bits of randomness, and we store only a SHA-256 hash of it, never the number itself. Your signed-in session is a signed, httpOnly cookie that scripts on the page cannot read.
Can you recover my account if I lose the number?+
No. Because we never store the number itself and there is no email on file, a lost account number cannot be recovered. Keep it in a password manager.
Do you use trackers or analytics?+
No. We do not add analytics, advertising, or tracking scripts to the site, and our fonts are self-hosted. We only set functional cookies, like your signed-in session and language.
Can I pay with Monero?+
Yes. Monero is accepted alongside Bitcoin, Ethereum, USDT, USDC, Solana, BNB, TRON, and Polygon. It offers the strongest on-chain privacy of the coins we take.
Will SimVala ever ask for my account number or seed phrase?+
Never. Support only needs the order details shown in your dashboard. Anyone asking for your account number, seed phrase, or private keys is trying to scam you.
Where are your servers?+
In Germany, inside the EU. Like most of the web, traffic reaches us through Cloudflare, which provides the secure connection and protection against attacks.
Keep reading
PrivacyAnonymous eSIMPrivate mobile data, bought without ID.
Crypto paymentsPay with MoneroThe most private way to pay.
PrivacyNo-KYC eSIMMobile data with no identity checks.
PrivacyStay private while travelingA checklist for your phone, data and money.
Also useful: How it works
Connect without the paper trail
Crypto only, no ID to buy, no email, and a login we store only as a hash.