Privacy Policy

1. Data we collect

We keep the set deliberately small. In practice it falls into four groups:

• Account data: email address and password hash.
• Billing data: order history, amounts, currency and the payment method type. Card numbers are handled by the payment provider and never reach our servers.
• Service data: the IP address you connect from, authentication events, traffic volume and connection timestamps. These are required to authorise sessions and meter usage.
• Site data: pages viewed, referrer, approximate location derived from IP, and device or browser type.

We do not log the contents of your traffic, the destinations you request, or any payload passing through the proxy.

2. Why we use it

• To provide the service: authorise connections, apply your plan limits and meter traffic.
• To take payment and issue invoices, and to meet accounting and tax obligations.
• To provide support, which is why a support conversation may reference your recent orders.
• To protect the network from abuse, fraud and credential sharing.
• To measure how the site performs, using aggregate analytics.

Where GDPR applies, we rely on contract performance for the first two purposes, legitimate interest for abuse prevention and analytics, and legal obligation for accounting records.

3. Cookies and analytics

The site uses a session cookie to keep you signed in and privacy-friendly aggregate analytics to count page views. We do not run advertising cookies or third-party trackers that build cross-site profiles.

If you arrive from an advertising campaign, the campaign identifier may be stored so that a later order can be attributed to it. That identifier is not linked to your browsing anywhere else.

4. Who else sees it

We share the minimum needed to operate, and never sell personal data:

• Payment providers, to process the transaction you initiated.
• Infrastructure and hosting providers that run our servers and databases.
• Email delivery services, for transactional messages such as receipts and password resets.
• Law enforcement or courts, where a valid, legally binding request compels disclosure.

5. How long we keep it

• Connection and authentication logs: 30 days, then deleted.
• Account data: for as long as the account exists, then 30 days after a deletion request.
• Billing records: as long as tax law requires, typically 5 to 7 years, in a restricted archive.
• Support conversations: 12 months.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict processing, or object to processing based on legitimate interest. You can also ask for your data in a portable format.

Send the request through the contact form, using the email address on the account so we can match it. We answer within 30 days. If you are in the EEA or the UK and you are unhappy with the outcome, you may complain to your local data protection authority.

7. International transfers

Our infrastructure spans several countries, so your data may be processed outside the country you live in. Where data leaves the EEA or the UK we rely on Standard Contractual Clauses with the receiving processor.

8. Security

Traffic to the site and the dashboard is encrypted in transit. Passwords are stored as salted hashes. Administrative access is limited to staff who need it, requires multi-factor authentication and is logged.

No system is immune. If a breach affects your personal data and creates a real risk to you, we will notify you and the relevant authority without undue delay.

9. Children

The service is not intended for anyone under 18. We do not knowingly collect data from children, and we delete such data if we discover it.

10. Changes and contact

When this policy changes materially we update the date at the top of the page and, for existing customers, send an email before the change takes effect.

Questions about this policy, or anything else, go through the contact form — pick the topic that fits and it reaches the right people.