Privacy Policy

Account Data

When you create an account, we collect:

• Name and email address
• Password (hashed with Argon2, never stored in plain text)
• OAuth provider ID if you sign in with Google or GitHub (not your OAuth tokens)

Tunnel & Connection Data

When you use tunnels, we collect:

• Subdomain names you create
• Connection timestamps and duration
• Your source IP address
• CLI version
• Bandwidth and request counts (for usage limits)

Traffic Data (Request Inspector)

For the replay and debugging feature, we temporarily store:

• HTTP request/response headers
• Request/response bodies (up to 64KB, larger truncated)
• Request timing and status codes

This data can be deleted by you at any time from the dashboard.

Billing Data

• Payment is processed by Polar.sh (we never see your card details)
• We store subscription IDs and billing email to link payments to your account

Data Retention & Law Enforcement

For security and legal compliance, we retain the following data for a minimum of 6 months:

• Source IP addresses
• Connection logs and timestamps
• Payment and billing information

This data may be disclosed to law enforcement authorities upon lawful request.

What We Don't Do

• Use third-party tracking or analytics
• Sell or share your data with third parties for marketing
• Store your payment card details