01Introduction
When we say "Eflexsim", "we", "our", or "us", we mean Top Explore Pte Limited, a company registered in Hong Kong with its registered office at Room A, 12/F, ZJ 300, 300 Lockhart Road, Wan Chai, Hong Kong.
Eflexsim is operated from Hong Kong, where the Personal Data (Privacy) Ordinance (PDPO) applies. Because we serve visitors in the European Economic Area (EEA) and the United Kingdom, we also comply with the EU GDPR, the UK GDPR, and the ePrivacy / UK Privacy and Electronic Communications Regulations (PECR) cookie rules in respect of those visitors. Read this policy together with our Privacy Notice.
02What Are Cookies and Similar Technologies?
Cookies are small text files placed on your device (your computer, tablet, or smartphone) by websites and apps you use. They can be set by the site you are visiting (first-party) or by another organisation, such as an embedded service (third-party). "Similar technologies" include browser local storage, software development kits (SDKs), tracking pixels, web beacons, and clear GIFs. We refer to all of these together as "cookies".
Some technologies do not store anything on your device — for example, our analytics provider counts visits using a server-side calculation rather than a cookie. We describe these too so you have a complete picture and, where relevant, a choice.
03The Categories We Use and Your Choices
We group the technologies on our Site into four categories. Essential is always on. The other three load only after you consent — through "Accept all" or by enabling them under "Manage preferences" in our cookie banner. You can change your choice at any time via the "Cookie preferences" link in the footer.
For visitors in the EEA and the UK, non-essential cookies are not set until you give consent, and rejecting is as easy as accepting. We manage advertising and analytics tags through Google Tag Manager using Consent Mode, so tags respect your choice.
| Category | What it does | On by default? |
|---|---|---|
| Essential | Keeps you signed in and your session secure, runs the cart and checkout, processes payments and prevents fraud, and remembers your cookie choices. The Site cannot work properly without these. | Always on (no consent required) |
| Functional | Remembers non-essential preferences (such as language and currency) and powers optional features such as live chat. | Off until you consent |
| Analytics | Helps us understand, in aggregate, how the Site is used so we can improve it. | Off until you consent |
| Marketing | Measures and supports advertising, and attributes referrals so partners are credited correctly. | Off until you consent |
04The Cookies and Technologies on Our Site
Essential (always on)
| Cookie / item | Set by | Purpose | Typical duration |
|---|---|---|---|
| sb-<project-ref>-auth-token (may split into …-auth-token.0, .1) | Supabase | Keeps you securely signed in | Up to ~1 year (session validity controlled server-side) — confirm |
| eflexsim_cart_session | Eflexsim (first-party) | Maintains your cart and checkout state | [Confirm] |
| ef_cookie_consent | Eflexsim (first-party) | Stores your cookie-preference choice | 12 months |
| Payment-provider fraud/session cookie(s) — names captured by scan | Our payment provider (checkout only) | Fraud prevention and payment-session integrity | Confirm by scan |
These are strictly necessary to provide the service you have requested (signing in, completing and securing a purchase), so they do not require consent under PECR / the ePrivacy rules.
Functional (off until you consent)
| Cookie / item | Set by | Purpose | Typical duration |
|---|---|---|---|
| Language / currency preference — name to confirm | Eflexsim (first-party) | Remembers your chosen language and currency | [Confirm] |
| Tawk.to live-chat cookies (e.g. __tawkuuid, TawkConnectionTime) | Tawk.to | Enables and maintains the live-chat widget and conversation continuity | [Confirm — varies] |
Analytics (off until you consent)
| Technology | Provided by | Purpose | Stores on your device? |
|---|---|---|---|
| Vercel Web Analytics | Vercel | Aggregated, anonymous usage statistics | No — cookieless. Visits are counted via a server-side hash of the request, discarded after 24 hours. |
| Google Analytics 4 (_ga, _ga_<container>) | Website analytics and usage measurement | Yes — _ga typically up to 2 years; _ga_* up to 2 years — confirm | |
| Google Tag Manager | Loads and manages analytics/marketing tags subject to your consent (Consent Mode) | GTM itself sets no analytics cookie; it loads tags that may |
Vercel Web Analytics is cookieless and does not, by itself, trigger the cookie-consent rule; we still place it under Analytics and do not load it unless you consent. Google Analytics does set cookies and loads only after you consent.
Marketing (off until you consent)
| Cookie / item | Set by | Purpose | Typical duration |
|---|---|---|---|
| eflexsim_ref_cookie_id | Eflexsim (first-party) | Remembers a ?ref= referral code so a partner/referral is credited at checkout | [e.g. 30 days — confirm] |
| Meta Pixel (_fbp; _fbc when present) | Meta Platforms | Advertising measurement and audience building | _fbp typically ~3 months; _fbc ~3 months — confirm |
The referral cookie is not strictly necessary and is set only with your consent.
Technologies that do not set cookies
- Sentry (error monitoring): its browser SDK does not set cookies on your device.
- Airalo (eSIM supplier) and our email delivery: server-side; they do not set cookies in your browser.
- Vercel hosting: we are not aware of Vercel setting its own routing/load-balancing cookies by default; confirmed by scan.
05International Data Transfers
Some providers above are located in the United States or other countries outside the EEA and the UK. Where they process EEA/UK personal data, we rely on appropriate safeguards: some US providers (including Vercel and Google) are certified under the EU-U.S. Data Privacy Framework and its UK Extension; for providers not certified under that framework (such as our payment provider), transfers are made under the EU Standard Contractual Clauses and, for UK data, the UK IDTA or UK Addendum. See our Privacy Notice for detail.
06How to Manage or Withdraw Consent
- Reopen the preference panel any time via the "Cookie preferences" link in the footer, and switch Functional, Analytics, or Marketing on or off.
- You can also block or delete cookies in your browser settings. Blocking Essential cookies may stop sign-in and checkout from working.
- Most browsers explain how to manage cookies in their help pages (Chrome, Safari, Firefox, Edge). If you use multiple devices, update each one.
Your choice is stored in ef_cookie_consent and honoured for 12 months, after which we may ask again. Withdrawing consent does not affect anything done while consent was active.
07When This Policy Will Change
We will update this policy when we change the technologies we use, and revise the "Last updated" date. Where changes are significant, we will draw them to your attention through the cookie banner.
08Contact
Questions about this policy or our use of cookies: privacy@eflexsim.com. If you are in the EEA or the UK, you may also complain to your data protection authority (in the UK, the Information Commissioner's Office).