General Privacy Policy

This Privacy Policy explains what personal data Ghostunnel collects when you use our website, apps, API and VPN service (together, the “Services”), why we collect it, how long we keep it, and the choices and rights you have. Capitalized terms not defined here have the meaning given in our General Terms.

A VPN is only worth using if you can trust what it does with your data, so we have tried to write this in plain words and to describe exactly what our systems keep.

1. Who we are

The Services are operated by [ENTITY NAME], [REGISTERED ADDRESS] (“Ghostunnel”, “we”, “us”). We are the controller of the personal data described in this policy.

For anything about your data, write to [email protected]. For help with your account, write to [email protected].

2. The short version

• We don't log what you do through the VPN. No browsing history, no DNS lookups, no traffic contents, no connection history.
• We don't keep your VPN sessions. While a tunnel is connected we hold what is needed to run it; when it is released, its record is deleted.
• We don't store the IP address you sign in from.
• We keep the minimum to run your account: your email, your plan and billing status, your devices, and how much data you've used this month (for the Free plan's limit).
• We don't sell your data and we don't use it for advertising.
• Analytics are opt-in. Google Analytics only runs on our website if you accept analytics cookies.

3. Data we collect

Your account

• Your email address, and your password stored only as a one-way hash. If you turn on two-factor authentication, its secret key (encrypted) and your backup codes (as one-way hashes). If you ask to change your email, we also hold the new address until you confirm it. If you sign in with a one-time email link, we send that link to your email address.
• Your name, if you choose to add it in Account settings.
• If you sign in with Google or Apple: the account identifier that provider gives us, and the email address and name it shares. We don't receive your password for those accounts.
• If you add a passkey: its public key, a random identifier for your account, the name you give it, and when it was added and last used. The private key stays on your device or in your password manager; we never receive it, or your fingerprint, face or PIN.
• Sign-in records: how many times you have signed in, and when you last signed in. We do not store the IP address you sign in from.
• Security tokens that keep you signed in, let you reset your password, and let our apps call our API. Signing out everywhere or changing your password invalidates them.

Billing

• Payments are handled by Stripe. Your card details go directly to Stripe; we never see or store them.
• We keep your Stripe customer reference, your plan, your subscription status and renewal date, whether a payment has failed, and your orders and invoices (amounts, dates and the invoice document).
• If you invite friends or were invited: the code in your invite link, which account invited which, and the free month each side was given. We don't show either of you who the other is. The record is deleted with either account.

Your devices

When you sign in to one of our apps, we register the device so you can see and sign out of it from Devices. We keep the device's name, its platform (for example iOS or Windows), the app version, and when it last contacted us.

Active VPN connections

While a tunnel is connected, we hold only what is needed to run it and to apply your plan's limits:

• the server and location it is connected to, and the private address assigned to it inside our network;
• its public key. We never keep its private key: in our apps it's created on your device and never leaves it; for configurations you create on our website it's shown to you once, when the tunnel is created, and not stored;
• the device it belongs to and when it was connected;
• running counters of the data it has transferred.

When the tunnel is released — because you disconnect, it stays idle, your plan no longer allows it, or you sign the device out — this record is deleted. We keep no history of your connections.

Monthly data total

To apply the Free plan's monthly data limit, we keep one running total of the data your account has used in the current calendar month. It is a single number, not tied to any server, time or session, and it resets each month. So that we email you only once when you pass 80% and 100% of it, we also note which of those alerts we last sent this month. You can turn usage and inactivity emails off in your account settings.

On the Free plan, a tunnel left unused for 30 days is released. To tell, we ask the server once a day when that tunnel last connected — the answer is used right away and not stored — and note only whether we have sent you the "still using it?" warning.

Website and server logs

Like most websites, our servers record requests to our website and API (such as the page requested, the time, and the requesting IP address and browser) to keep the Services running and to detect and stop abuse. These logs are kept for up to [LOG RETENTION] and are not linked to your VPN activity. To protect sign-in and sign-up forms from brute-force attacks, we also keep short-lived counters keyed by IP address or email address; they expire automatically within an hour.

Our website is served through Cloudflare, which tells us the country a visitor is connecting from so we can show your connection status at the top of the page. We do not store it.

Errors

When something breaks, our error monitoring service (Sentry) receives a technical report: the error, the part of the Services where it happened and the request path. It is configured not to send IP addresses, cookies or other personal data by default.

Messages you send us

If you email us or use the contact form in your account, we keep the conversation, including your email address, to answer you and to follow up. The form can also include details about your setup — your plan, connected tunnels (name, location, protocol), data used this month, whether two-factor authentication is on, and your browser and app versions — only if you leave that box ticked.

Cookies

We use cookies that are necessary for the website to work, and — only with your consent — analytics cookies. See our Cookie Policy.

4. What we never collect

When you use the VPN, we do not collect, log or store:

• the websites you visit, the apps you use or the contents of your traffic;
• your DNS lookups;
• a history of your connections — when you connected, for how long, to which server, or how much data each session used;
• the IP address you connect from, or which of our IP addresses you were using at a given time.

Because we don't have this information, we can't hand it to anyone — see our Law Enforcement Requests page.

5. How we use your data, and our legal bases

• To provide the Services — create your account, connect your tunnels, enforce your plan's device and data limits, and keep you signed in. Legal basis: performance of our contract with you.
• To bill you — process payments, issue invoices, handle failed payments and refunds. Legal basis: contract, and our legal obligations (tax and accounting).
• To communicate with you — send sign-in links, password resets, receipts and important notices about your account or the Services, and answer your messages. Legal basis: contract, and our legitimate interest in supporting our users.
• To keep the Services secure — prevent fraud, abuse and attacks, and fix errors. Legal basis: our legitimate interest in running a safe, reliable service.
• To understand how our website is used — with Google Analytics, only if you accept analytics cookies. Legal basis: your consent, which you can withdraw at any time.
• To comply with the law — for example tax record keeping, or responding to valid legal process as described on our Law Enforcement Requests page. Legal basis: legal obligation.

We do not use your data for automated decision-making that has legal or similarly significant effects on you.

6. How long we keep data

• Active tunnel records — until the tunnel is released, then deleted.
• Monthly data total — replaced at the start of each calendar month.
• Devices — until you sign the device out or your account is deleted.
• Account data — for as long as you have an account. When your account is deleted, we delete or anonymize it, except what we must keep for the reasons below.
• Billing records and invoices — for as long as tax and accounting law requires, currently [BILLING RETENTION].
• Website and server logs — up to [LOG RETENTION].
• Brute-force protection counters — expire automatically within an hour.
• Emails with our support team — as long as needed to resolve your request, and no longer than [SUPPORT RETENTION].

7. Who we share data with

We share personal data only with the service providers that help us run Ghostunnel — for example our payment processor, hosting provider and email provider — and only what each needs to do its job. They may use it only on our instructions. The full list is on our Service Providers page.

We may also disclose data when the law requires it, as described on our Law Enforcement Requests page, or to a successor if Ghostunnel is merged or sold — in which case this policy continues to protect your data and we will tell you beforehand.

We do not sell or rent personal data, and we do not share it for advertising.

8. International transfers

Our service providers may process data outside the country where you live, including in [HOSTING REGION] where our main systems are hosted. Where the law requires it, we protect these transfers with appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

9. Security

We protect your data with measures appropriate to the risk, including: HTTPS between your browser or app and Cloudflare, which serves our website, encrypted database connections, encryption at rest for secrets we must keep (such as two-factor keys), one-way hashing of passwords, tokens that can be revoked, and access to production systems limited to the people who need it. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct data that is inaccurate — you can change your name and email in Account settings;
• have your data deleted;
• receive your data in a portable format;
• object to, or ask us to restrict, processing based on our legitimate interests;
• withdraw your consent at any time, for example to analytics cookies, without affecting processing done before;
• complain to a data protection authority where you live or work.

You can download a copy of your data and delete your account yourself under Account settings (Your data and Delete account). For everything else, or if you prefer, email [email protected] from the address on your account. We may ask you to confirm your identity, and we will answer within the time the law requires (normally one month). We won't treat you differently for exercising your rights.

These rights come from laws such as the EU and UK General Data Protection Regulation, Indonesia's Personal Data Protection Law (UU PDP) and the California Consumer Privacy Act. We apply them to every user, wherever they are. California residents: we do not sell or share personal information as those terms are defined in the CCPA.

11. Children

The Services are not intended for anyone under 16, and we don't knowingly collect data from them. If you believe a child has given us personal data, contact [email protected] and we will delete it.

12. Changes to this policy

We will update this policy when our practices change. The date at the top shows the latest version. If a change is significant, we will tell you by email or in the Services before it takes effect.

13. Contact

[ENTITY NAME], [REGISTERED ADDRESS]
Privacy: [email protected]
Support: [email protected]