Privacy Policy

We do not proxy your traffic through our servers, and we do not inspect, log, or store the contents of your connections or the sites you reach. We never receive your private key — it is generated and kept on your device.

To run your account and the network, we hold:

• Account data — your email and authentication identifiers from our sign-in provider.
• Device data — the device name you choose, its public_key, and its assigned tunnel addresses.
• Operational metadata — last handshake time and byte counters used to show device status and enforce plan limits. This is connection metadata, not connection content.
• Billing data — plan and payment status; card details are handled by our payment processor, not stored by us.

We use this data to authenticate you, provision and route your devices, enforce your plan's device_limit and region rights, show you accurate device status, and process billing. We don't sell your data, and we don't use it for advertising.

We rely on a small number of processors to operate: an authentication provider for sign-in and a payment processor for billing where it's enabled. They handle only the data needed for their function and under their own terms.

Account and device records persist while your account is active. Operational metadata is kept only as long as it's useful for showing status and enforcing limits. When you remove a device or close your account, its records and keys stop being served and are cleared.

You can add, rename, rotate, and delete devices yourself, and download or revoke a device's configuration at any time. To access or delete the account data we hold, reach us through the support page.

If this policy changes materially, we'll update the date above and, where appropriate, note it in-product. Questions about privacy belong on the support page.