Privacy Policy

Last updated: 24 October 2026

The controller of personal data is [Full name of the individual, or company name, and company ID if any], [postal address]. Privacy questions: .

1. What data we collect

• Account: email address, chosen language and password. The password is stored only as an irreversible hash.
• Subscription and payments: chosen plan, term and invoices. Card details are processed by the payment provider and never reach us.
• Devices: device name, protocol, chosen server IP address, public key or certificate serial number, and an end date if you set one. The device configuration (including its private key) is stored encrypted so you can view or download it again.
• One-time link: only if you ask for it, the configuration is kept encrypted for up to 15 minutes and deleted the first time it is opened.
• Traffic volume: the number of bytes transferred (downloaded and uploaded) per hour, for your account, the chosen IP address and protocol. It is used only for your plan’s monthly allowance, the graph in your account and server monitoring. It contains no addresses, sites or content.
• Support and notices: the messages you send us and the notices we send you.
• Reviews: the name you give, the rating and the text. They are published on the site after a check.
• Two-factor authentication (optional): the secret used to generate codes, stored encrypted.
• Administrator action log: which administrator changed what (for example a plan or an invoice), for security and accountability.

2. What we do not record

The application does not record customers’ IP addresses, the sites visited, DNS queries or the content of traffic. To limit password-guessing and abuse, a visitor’s address is used only briefly in the server’s memory and is not written to the database. [Confirm this is also true for your server, reverse proxy and hosting. If you keep any connection logs, describe exactly what and for how many days, and do not write “no logs”.]

3. What we use the data for

To perform our contract with you (account, subscription, configurations, support), to keep the service secure and to meet legal obligations such as accounting. We do not sell your data and do not give it to third parties unless a law or a binding decision of a competent authority requires it.

4. How long we keep it

Account and device data are deleted when you delete your account. Invoices are kept for [period required by law], but with no link to your account after it is deleted. Support requests are deleted with the account. You can delete your review at any time, and when the account is deleted its link to you is removed. Hourly traffic data is kept without a link to the account after deletion.

5. Recipients

We use providers without which the service cannot run: Cloudflare (the traffic to the website, not to VPN connections, passes through it, and so does the Turnstile bot check on forms), a payment provider, a hosting provider and an email provider. They see only the data needed for their role, and Cloudflare sees website visitors’ addresses and, depending on its settings, may record them. [Name the actual providers and the countries where they process data.]

6. Cookies and browser storage

The site uses no tracking cookies and loads no external analytics scripts. After you log in, your session is kept in the browser’s storage and removed when you log out or it expires. A small cookie remembers that you have seen the cookie notice. See the page Cookies and browser storage for details.

7. Data security

The connection to the site is encrypted (HTTPS). Passwords are stored only as hashes, two-factor secrets are encrypted and device configurations (with their private keys) are stored encrypted. Logging in and other sensitive actions are limited by the number of attempts, forms are protected against automated requests, and the administration panel is at a separate address. No system is completely secure. If we learn of a security breach that affects your data, we will tell you and notify the supervisory authority where the law requires it.

8. Your rights

You can ask for access, correction, deletion, restriction of processing and portability of your data. You can delete your account yourself from the “Profile” section. You can complain to the Commission for Personal Data Protection.