diff --git a/static/usage.html b/static/usage.html
index e935a90e..ded0bf32 100644
--- a/static/usage.html
+++ b/static/usage.html
@@ -100,6 +100,7 @@
                             <li><a href="#sandboxed-google-play-installation">Installation</a></li>
                             <li><a href="#sandboxed-google-play-configuration">Configuration</a></li>
                             <li><a href="#sandboxed-google-play-limitations">Limitations</a></li>
+                            <li><a href="#sandboxed-google-play-esim">Privileged eSIM management</a></li>
                         </ul>
                     </li>
                     <li><a href="#banking-apps">Banking apps</a></li>
@@ -966,6 +967,22 @@
                     it tries to uninstall an app and you reject it. You can work around this by
                     force stopping and then reopening it.</p>
                 </section>
+
+                <section id="sandboxed-google-play-esim">
+                    <h3><a href="#sandboxed-google-play-esim">Privileged eSIM management</a></h3>
+
+                    <p>By default GrapheneOS always has shipped with baseline support for eSIM,
+                    where users can use any eSIMs installed previously on the device. However, in
+                    order to manage and add eSIMs, proprietary Google functionality is needed. This
+                    is fully disabled by default.</p>
+
+                    <p>Privileged eSIM management can be enabled in Settings ➔ Network &amp; 
+                    Internet ➔ Privileged eSIM management. The toggle will be greyed out and unusable
+                    if sandboxed Google Play is not installed, as the functionality is reliant on it.</p>
+
+                    <p>By enabling the toggle, the proprietary Google functionality is enabled and
+                    will be used by the OS to provision and manage eSIMs.</p>
+                </section>
             </section>
 
             <section id="banking-apps">