Privacy policy
The honest summary: we keep the minimum needed for the service to work and be auditable, and we do not keep the content of your traffic.
What we do NOT keep
Traffic content. We do not terminate the user's TLS, so what passes through the tunnel is opaque to us — that is not a promise of conduct, it is a consequence of the design.
What we keep
Account and user (email, hashed password). Paired devices and their operational telemetry (carrier, connection type, battery, public address). Connection records with source, destination, time and volume — needed to attribute usage and respond to abuse. An audit log of administrative actions.
For how long
Connection records are purged at 30 days. Usage aggregates and audit records remain, because they answer questions the individual records no longer can.
Who we share with
With the payment provider, what is needed to charge you — never the content of your traffic. With the e-mail provider (Brevo), your address, the account name, your language and the channel that brought you here, so we can send the service's messages: sign-up confirmation, password recovery and account notices. Nothing else leaves here, and we neither sell nor hand over our base to anyone. Closing your account removes your address from the provider's list.
Your rights
You can export your account data and close the account. Closing unlinks devices and revokes credentials.