Privacy policy
The short version: we run no ad trackers, we don't know your name unless you tell us, and we couldn't sell your data if we wanted to — we barely have any.
Last updated: 28 July 2026
What we collect (all of it)
Anonymous click IDs. When you click 'Get plan' and we send you to a provider, we generate a random ID (a 'subid') for that click and store which plan, which country page, what kind of device (just 'mobile', 'desktop', or 'bot' — nothing more specific), the page you came from, and the time. This is how we find out whether our recommendations actually lead to purchases, and it's how we get paid. None of it identifies you.
A session cookie. On your first visit we set a random ID in a cookie so we can tell that two clicks came from the same browser. It contains no personal information — it's a coin flip with 122 bits.
Contact form submissions. If you write to us, we store the name, email address, and message you typed, because replying to you without them would be a magic trick we haven't mastered. We use them only to reply.
Your currency preference. If you switch the display currency, we remember it in a cookie so you don't have to switch it again.
Admin cookies. Our own staff logins use an authentication cookie. Unless you work here, this one's not about you.
What we deliberately don't collect
No analytics trackers at launch — no Google Analytics, no Meta pixel, no fingerprinting, no heatmaps. No advertising or ad networks of any kind. We do not store your IP address with clicks (we reduce your browser's user-agent to just 'mobile', 'desktop', or 'bot' and keep nothing else about your device). No account system, so no passwords, no profiles, no marketing emails. We don't buy data about you and we don't sell, rent, or share data with anyone except as described in the affiliate section below.
Cookies we set
| Cookie | Purpose | Lifetime |
|---|---|---|
sid | Anonymous session ID (random UUID) so clicks from the same browser can be grouped. HttpOnly, SameSite=Lax. | 1 year |
cur | Remembers your chosen display currency (e.g. EUR). | 1 year |
sess | Keeps RoamSonar staff logged in to the admin panel. HttpOnly, SameSite=Strict. Only set if you log in as an admin. | 7 days |
That's the whole list. No third-party cookies are set by this site.
When you click out to a provider
RoamSonar is a comparison site, and we earn a commission from affiliate links. When you click through to a provider (currently Simbye), the link tells them you arrived via RoamSonar, along with our anonymous click ID. If you buy, the provider may report that a sale happened for that click ID — that's how we get paid, and it's the entire transaction between us and them. The provider never sends us your name, email, payment details, or anything else about you, and we never send them anything about you beyond that random ID. Once you're on their site, their privacy policy applies — worth a skim, as always.
How long we keep things
Click records: 18 months, then automatically deleted (a weekly job removes anything older). Contact messages: until resolved, then periodically cleared. Session and currency cookies: they expire on their own after a year, and you can delete them anytime in your browser. Server logs at our host (Cloudflare) are governed by Cloudflare's own retention and are not something we mine.
Your rights
Depending on where you live (GDPR, UK GDPR, CCPA and friends), you may have rights to access, correct, delete, or export personal data we hold about you. Practically speaking, the only personal data we could hold is a contact-form message — click data can't be linked back to you, by design. To exercise any right, use the form at /contact and start your message with PRIVACY; we'll respond within 30 days. If you believe we've mishandled your data you can also complain to your local data-protection authority, though we'd appreciate the chance to fix it first.
Changes to this policy
If we change what we collect — for example, if we ever add privacy-respecting analytics — we'll update this page and change the 'Last updated' date at the top before the change takes effect. We won't retroactively do anything sneaky with data collected under an older, stricter policy.