Privacy Policy
Last updated:
Information We Collect
When you create an account we collect your name and email address, and a securely hashed version of your password. If you choose to verify a phone number for account recovery, we store that number. Payment details are entered directly with our payment processor and we never see or store full card numbers. When you visit the site we also receive ordinary technical data such as your browser type, approximate location derived from your IP address, and which pages you opened. We do not log the traffic that passes through the VPN itself — not the sites you visit and not your browsing activity. The only VPN records we keep are of the connection sessions themselves, described under How Long We Keep Data.
How We Use Your Information
We use your information to operate your account and issue your VPN configuration, to process payments and renewals, to send service messages such as registration, password reset, billing and expiry notices, to answer your support requests, and to detect abuse of the service. Marketing email and SMS are sent only if you have separately agreed to receive them, and you can withdraw that consent at any time without affecting your subscription.
Service Providers
We do not sell personal data. We share the minimum necessary with providers who operate parts of the service on our behalf: Stripe for payments and billing, Resend for transactional email, Cloudflare for content delivery and protection against abuse, Sentry for error diagnostics, and Google Analytics through Google Tag Manager for usage statistics. We also send conversion events — such as a trial being started or a subscription being created — from our own servers to Google and to Meta, so that we can measure how our advertising performs. These events identify the action, not the contents of your VPN traffic.
Cookies and Measurement
We use cookies that are necessary for signing in and for remembering your language preference, and analytics cookies that help us understand how the site is used. You can block or delete cookies in your browser; the site will still work, though you will need to sign in again. Please note that because some advertising measurement is sent from our servers rather than from your browser, ad and tracker blockers cannot prevent all of it.
How Long We Keep Data
We keep account information for as long as your account exists. After you close your account we delete what we no longer need and retain only what accounting, tax and other legal obligations require us to keep. Support correspondence is kept for one month so that we can follow up on earlier requests. There are no VPN traffic logs to retain, because we do not create them. We do keep a record of the connections themselves — when a session started and ended, the address it was made from, and how much data passed through it — so that we can tell whether the service is working for you, answer "was that really me", and investigate abuse. Those records are deleted after 90 days.
What We Keep and for How Long
Everything we store about you, why we store it, and when it is deleted. Nothing about what you do through the VPN is on this list, because we do not record it.
| Data | Why | How long |
|---|---|---|
| Sites you visit, DNS lookups, the contents of your traffic | Not recorded | Never stored |
| VPN connection sessions: start and end time, the address you connected from (and any change during the session), data volume, which server | To see whether the service works for you, answer "was that really me", and investigate abuse | 90 days |
| Date of your first and last VPN connection (no address, no volume) | To know whether the service ever worked for your account | While your account exists |
| Account: name, email, password (hashed), phone number if you verified one, language | To run your account and let you recover access | While your account exists |
| Sign-up and sign-in records: IP address, country, browser, time; what you consented to and when | Account security and proof of consent | While your account exists |
| How you found us: advertising campaign tags and click IDs from the link you arrived by | To measure which advertising works | While your account exists |
| Billing: your Stripe customer reference, invoices and receipts. Card numbers stay with Stripe | Billing, tax and accounting | As long as tax and accounting law requires |
| Sign-ups that were never completed | To let you finish signing up | Deleted after 14 days |
| One-time codes sent by email or SMS | To verify your email or phone and reset your password | Deleted 24 hours after they expire |
| Support correspondence | To follow up on earlier requests | One month |
| Website usage statistics (Google Analytics, Cloudflare) | To understand how the site is used | Under those services' retention settings |
| Error reports (Sentry), which can include your IP address | To find and fix errors | Under Sentry's retention settings |
Your Rights
You may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. You may also withdraw your consent to marketing at any time. Write to [email protected] with the subject "Privacy Request" from the email address on the account. We may need to confirm your identity before acting, and we may have to keep certain records where the law requires it.
Security and Where Data Is Processed
Traffic between you and our systems is encrypted, access to customer data is limited to people who need it to do their work, and the VPN connection itself uses AES-256 encryption. We do not log anything about what you reach through the tunnel — no sites, no addresses, no content — and we keep only the connection records described above. Our service providers operate in several countries, so your information may be processed outside the country where you live.
Changes and Contact
If we change this policy we will update this page and the date shown above, and we will notify account holders by email if the change is significant. For any question about privacy, write to [email protected].
