Privacy

What we know about you, what we keep, and for how long — in plain words, because a promise you cannot check is not worth making.

What we do not know about you

We never ask for a name, a document, an address or a phone number, and there is nowhere to enter one. An account is a random key: the app shows it, we store it, and it says nothing about who holds it.

Nothing below is sold or shared with anyone. It exists so that we can answer a lawful order, and for nothing else.

What we keep

For each connection made through our servers we record three things: the address a connection came from, where that connection went, and when. Nothing else.

The destination is recorded as our servers see it — an address, or the site name the device asked for. Records are kept for up to 365 days and then destroyed.

What is not in those records

• your account — it is not written there, and there is no way to work out which account a record belongs to
• anything you sent or received — we cannot see inside an encrypted connection and do not try
• which pages you opened on a site, what you typed, or what was shown to you

That first point is the important one. The record and the account live in different places, under different keys, and nobody can join them, ourselves included.

Who can read them, and when

Nothing in the running system can. Records are encrypted the moment they are made, on the server that makes them, with a key that is not held anywhere in our infrastructure — so the machine keeping a year of records cannot open a single one of them.

Reading requires a person to bring that key by hand. Every such reading is written down: who did it, when, and under what authority.

Why we keep them at all

Because we are a company with a name and an address, not an anonymous group, and a lawful order addressed to us has to be answerable. Such an order asks about an address at a time — and that is exactly what we keep.

What a VPN does not do

It divides trust rather than removing it: instead of your provider, your traffic passes through us. It does not make you anonymous to a site you sign in to, and it does not protect you from someone you hand your details to yourself. Always check who you are dealing with.