Privacy policy

This website has no analytics, advertising or third-party scripts and sets no cookies of its own. Your theme choice is stored only in your browser.

Our servers and our network protection provider (Cloudflare) process your IP address and browser details in technical logs to deliver the site and keep it secure. Cloudflare may set strictly necessary security cookies.

• Account data: e-mail address, password hash and two-factor settings.
• Billing data: top-ups, transaction IDs and balance history.
• Usage data: traffic per sub-user or key, and connection metadata (target domain, port, time, bytes). Never the content of your traffic.
• Verification data, only when a higher verification tier requires it.

• Account data: e-mail address, password hash, two-factor settings and payout details.
• Device data: operating system, app version, a device ID and public key, uptime and traffic served.
• Network data: your public IP address and, derived from it, approximate country, city, provider (ASN) and connection type.
• Consent record: what you agreed to, when, and with which app version.
• Identity verification data, only when required before a withdrawal.

• To provide the service: routing traffic, choosing devices, billing buyers and paying partners.
• To prevent fraud and abuse and to answer complaints about traffic.
• To meet legal, tax and accounting obligations.
• To contact you about your account and important changes.

We do not sell personal data and do not use it for advertising.

• Connection metadata: 90 days, then deleted.
• Account, billing and payout records: while your account exists, and afterwards for as long as accounting and tax law requires.
• Device and IP history of partner devices: while the device is registered, and for 90 days after it leaves the network, so we can answer abuse reports about traffic it carried.
• Website server logs: 30 days, for security.

• Hosting and network providers that run our infrastructure (DigitalOcean, Cloudflare).
• Payment providers that process top-ups and payouts.
• Authorities, when the law requires it.
• Buyers see an exit IP and its approximate location, never a partner's name, account or contact details.

Depending on where you live, for example under the EU GDPR or another data protection law that applies to you, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. Write to [email protected].

Passwords are stored only as hashes. Two-factor authentication is available and required for withdrawals. Our servers talk to each other over private networks, and partner devices connect to us over TLS 1.3 using our own certificate authority.

We will announce material changes on this page and by e-mail. Questions: [email protected].