What we keep, and what we don’t
Operational data — the machine you connected through, the bytes moved, the handshakes — is deleted after seven days.
The closest thing to an identity we hold is the address you connect from. We erase it 24 hours after it last changes — or after your last handshake, whichever is later.
- No traffic content, no packet capture and no deep packet inspection: we do not copy, store or read the packets that cross a tunnel.
- No DNS query log: nothing we hold records the name you looked up.
- No destination IP history: no row records where you connected. The only public address on a peer row is your own, and it is erased 24 hours after it last changes — or after your last handshake, whichever is later.
- No keystroke, application or process monitoring: no column anywhere records what you typed, which program you ran, or what ran beside it.
Payment records are kept for as long as tax law requires. The retention policy has the period and the table.