Cookie policy

This Cookie Policy explains the cookies and similar technologies we use on ezyhop.com, why we use them, and how you can control them. It sits alongside our Privacy Policy, which explains how we handle your personal data in general.

“EzyHop”, “we” and “us” means EzyHop, 600 N Broad Street, Suite 5 #3414, Middletown, DE 19709, United States. “You” means anyone who visits or uses our website.

Cookies in short

• We use a small number of strictly necessary cookies to run the store: to keep you signed in, to let you open your order and to keep sign-in safe. These are always on.
• We use optional analytics only if you click “Accept” in our cookie banner. If you click “Reject”, or don’t choose, nothing optional runs.
• We don’t use advertising cookies, social media pixels or cross-site tracking, and we don’t sell your data.

What cookies are

Cookies are small text files that a website saves in your browser. The site can read them on later visits or pages. Some last only a few minutes; others last longer and are deleted automatically when they expire.

Similar technologies work in much the same way. On EzyHop that means one item in your browser’s session storage, described below.

“First-party” cookies are set by ezyhop.com. “Third-party” cookies are set by another company’s domain.

Strictly necessary cookies

These cookies make the website work and keep your account and orders secure. Because they are needed for the service you ask for, they don’t need your consent. They are all first-party, are used only by EzyHop and are not used for advertising.

Unless we say otherwise, they can’t be read by scripts on the page (HttpOnly), are sent only over a secure connection, and are limited to our own site (SameSite=Lax). On our live site, the names of the sign-in cookies start with __Secure-.

• ezy.session_token. Keeps you signed in to your account. Lasts 30 days and renews while you use the site. Removed when you sign out.
• ezy.session_data. A short-lived copy of your sign-in status, so pages load faster without checking our database every time. Lasts 5 minutes.
• ezy_o_ followed by 8 characters (for example ezy_o_1a2b3c4d). Lets the browser you bought on open your order page and your eSIM install details without signing in. It is signed so it can’t be forged. Lasts 30 days. You get one per order.
• ezy_login. Protects the sign-in link we email you, so the link works only together with the browser that asked for it. Lasts 15 minutes.
• ezy_oauth_locale. Only if you choose “Continue with Google”. Remembers your language while you are on Google’s sign-in page, so a new account is set up in the right language. Lasts 15 minutes.
• ezy.state. Only if you choose “Continue with Google”. Protects the sign-in round trip with Google against forgery. Lasts 5 minutes.
• ezy.better-auth-passkey. Only if you sign in with or add a passkey. Holds a one-time security challenge for that step. Lasts 5 minutes.
• ezy_admin_su. Only for EzyHop staff. Confirms a recent second security check before using our admin tools. Lasts 15 minutes.
• ezy_consent. Remembers your choice in the cookie banner (“Accept” or “Reject”) and when you made it, so we don’t ask on every page. Lasts 1 year, after which we ask again. Our page script needs to read it, so it is not HttpOnly.

We don’t use a cookie to remember your language. Your language comes from the web address (for example, /es/ for Spanish).

Optional cookies (only if you accept)

If you click “Accept” in the cookie banner, we also use the following.

How you found us

• ezy_ft (first-party). Remembers how you first arrived at EzyHop: the website that sent you (its address, without any search terms or codes in the link), the campaign tags in the link if there were any (utm_source, utm_medium, utm_campaign and ref), the first page you landed on and the time. It is set once and lasts 90 days.

This helps us learn which guides, partners and campaigns help travelers find us. If you then create an account or place an order, we save this information with that account or order.

We never set this cookie on our staff admin pages. If you click “Reject” at any time, we delete it straight away.

Visit statistics

We may use one privacy-friendly analytics service to count visits and see which pages are popular. It is either Plausible Analytics or Cloudflare Web Analytics. Both are designed to work without setting cookies on your device.

We load the analytics script only after you click “Accept”, and never on our staff admin pages. When it loads, your browser connects to that provider’s server (plausible.io or static.cloudflareinsights.com), which receives the technical information any website receives, such as the page you visit, the referring website, and your browser type and IP address. We use the results as overall statistics, not to identify you.

Browser storage

• ezy_lang_hint_dismissed (session storage). If you close the suggestion to view the site in Spanish, this remembers your choice. It is cleared when you close the tab. It is a convenience you ask for, so it doesn’t need consent.

We don’t use local storage.

Third parties

Some parts of EzyHop are provided by other companies. They are responsible for their own cookies and technologies, under their own policies.

• Cloudflare Turnstile (security check). On the sign-in, “Find my order” and checkout pages we use Cloudflare Turnstile to tell people from bots. It runs in a frame loaded from challenges.cloudflare.com, and Cloudflare processes technical information about your browser and device, including your IP address, to make that check. It is part of keeping the store secure, so it is strictly necessary.
• Cloudflare (network and security). Our website runs through Cloudflare’s network, which protects it against attacks and abusive traffic. For this, Cloudflare may set strictly necessary security cookies, such as __cf_bm, which help filter out bots.
• Stripe (payments). When you pay, you leave ezyhop.com for Stripe’s secure payment page at checkout.stripe.com. Stripe sets its own cookies there, for example to process your payment and prevent fraud. We don’t load Stripe’s scripts on ezyhop.com. See Stripe’s privacy and cookie policies.
• Google (optional sign-in). If you choose “Continue with Google”, you sign in on Google’s own pages, where Google’s cookie and privacy policies apply.
• Apple and Google eSIM setup pages. Our one-tap install links open Apple’s or Google’s eSIM setup page on your phone. Those pages are run by Apple or Google under their own policies.

We host our fonts ourselves, so loading a page doesn’t contact a font provider.

The cookie banner

When you first visit EzyHop, a banner explains our cookies and offers two buttons: “Accept” and “Reject”.

• Accept turns on the optional cookies and analytics described above.
• Reject keeps only the strictly necessary ones.
• If you don’t choose, the banner stays and nothing optional runs.

We save your choice in the ezy_consent cookie for 1 year. After that, or if you clear your cookies, we ask again.

Changing your choice

You can change your mind at any time.

• On our website: click “Cookie settings” in the footer of any page to reopen the banner, then choose again. If you switch to “Reject”, we delete the ezy_ft cookie straight away. An analytics script that already loaded stops on your next page view.
• In your browser: most browsers let you see, block and delete cookies in their settings. Their help pages explain how. If you block or delete our strictly necessary cookies, parts of EzyHop won’t work: you may be signed out, and your browser may lose direct access to your order page. You can always get back to an order with the link we emailed you, by signing in with the same email, or through “Find my order”.

Turning off optional cookies doesn’t change the price or availability of anything we sell.

Changes to this policy

We’ll update this policy when the cookies we use change, and we’ll change the effective date at the top. If we add a new type of optional cookie, we’ll ask for your consent again before using it.

Contact us

Questions about cookies or your privacy? Contact us and we’ll be happy to help.

EzyHop, 600 N Broad Street, Suite 5 #3414, Middletown, DE 19709, United States.