Privacy policy
The honest summary: we keep the minimum needed for the service to work and be auditable, and we do not keep the content of your traffic.
What we do NOT keep
Traffic content. We do not terminate the user's TLS, so what passes through the tunnel is opaque to us — that is not a promise of conduct, it is a consequence of the design.
What we keep
Account and user (email, hashed password). Paired devices and their operational telemetry (carrier, connection type, battery, public address). Connection records with source, destination, time and volume — needed to attribute usage and respond to abuse. An audit log of administrative actions.
For how long
Connection records are purged at 30 days. Usage aggregates and audit records remain, because they answer questions the individual records no longer can.
Who we share with
The payment provider, the minimum needed to charge. An identity provider, if you choose to sign in through one. Nobody else.
Your rights
You can export your account data and close the account. Closing unlinks devices and revokes credentials.