Privacy policy
The short version
We log connection metadata because it is what makes the meter auditable and lets us respond to abuse reports. We do not log the contents of your traffic. We keep logs for 30 days. We do not sell anything to anyone.
What we collect
Account data. Email address, and payment identifiers from our processor. We do not receive or store full card numbers.
Connection logs. For each request: timestamp, destination hostname, HTTP method, response status code, bytes sent, bytes received, and which of your credentials was used.
Website analytics. This marketing site runs no third-party analytics, no advertising pixels, and sets no cookies. There is no consent banner because there is nothing to consent to.
What we do not collect
- Request bodies or response bodies
- Full URLs including paths and query strings — hostname only
- Credentials, cookies or tokens you send through the proxy
- Anything decrypted from a TLS tunnel. We cannot see inside it.
Why we collect it
- To bill you accurately, and to let you check us. The per-request log is the same data your usage export shows.
- To respond to abuse reports. When someone reports that traffic from our network attacked them, connection metadata is how we identify and stop it.
- To keep the service working. Diagnosing failures, capacity planning, detecting pool problems.
How long we keep it
Connection logs are deleted after 30 days. Account and billing records are kept for as long as tax and accounting law requires, typically six years, and then deleted.
Who we share it with
Our payment processors, for the purpose of taking payment. Our infrastructure providers, as processors, to run the service. Law enforcement, where we receive a valid, binding legal order — and we will tell you unless we are legally prohibited from doing so.
Nobody else. We do not sell, rent or trade user data.
Your rights
If you are in the UK, EU, or another jurisdiction with comparable law, you can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email [email protected] and we will action it within 30 days.
Deleting your account deletes your connection logs immediately rather than at the 30-day mark.
Where data lives
Account data and logs are stored in the EU. Traffic itself is proxied through exit nodes in whichever country you request, which is the point of the product.
Residential network participants
People whose connections form part of our residential pool opt in through a paid SDK partner, are told in plain language what their bandwidth is used for, are paid for it, and can withdraw at any time. We describe this further on the honesty page.
Changes and contact
Material changes are announced in Discord and by email before taking effect. Questions go to [email protected].