Reference

Logs and privacy

Short version: the service does not build a history of the sites you visit and does not record the contents of your traffic. Below is what that means in practice.

What we do not record

• a history of visited sites;
• the contents of the traffic you send;
• DNS queries used to profile your online activity.

This is written down in our Privacy Policy, section 7. The policy is published and applies to everyone, not only to the people who read it.

What is processed

For a subscription to work at all, the server has to know who is connecting and where to let them in. That means:

Data	Why
Technical subscription identifier	To confirm the access is paid for
Connection state and chosen node	To route the connection to a server
Time of a technical event	Fault diagnosis
App and operating system version	To tell where a problem comes from
Traffic volume	A subscription counter, total only, no contents
Network address	A connection cannot physically be established without it

What you can see yourself

The dashboard shows the days you have left, a total traffic counter and the list of connected devices. That is the same set we process on our side: there is no list of sites, neither for you nor for us.

Payments

Full card details, CVC and banking credentials are handled by the payment provider and are never passed to the service. We see the amount, currency, date, status and transaction id, which is exactly what is needed to reconcile a payment or issue a refund.

Support

Never send support passwords, confirmation codes, full card details, seed phrases or private keys. They are not needed to solve your problem, and forwarding secrets is a risk in itself.

Trackers and cookies

No third-party advertising trackers or behavioural profiling systems are used. Technical cookies and local storage are needed for sign-in, session security and remembering your interface settings. Turn them off and signing in to the dashboard may stop working.

Who data may be shared with

Only those the service cannot run without, and only to the extent their job requires: hosting providers, payment services, email and notification providers, Telegram when you sign in through Telegram, support and security contractors. Separately: authorised state bodies where there is a lawful request. Personal data is never sold and never passed on for someone else's advertising.

Withdrawing consent and deleting data

The request procedure, deadlines and your rights are set out in the policy itself. Write to support from the address the account is registered to and say what you want: to withdraw consent, correct your data or delete the account.