Privacy policy

We built Tunnelo so that we know as little about you as possible. We do not ask for your name, email address or phone number to open an account, and we do not log what you do while connected.

• VPN traffic is encrypted between your device and our servers.
• No traffic, DNS or connection logs on VPN servers.
• No email address or password needed for an account.
• No tracking, analytics or advertising cookies on this website.
• We do not sell personal data because we avoid collecting it.

When you connect to Tunnelo, your internet traffic is encrypted with WireGuard between your device and our VPN server. Your internet provider, the Wi-Fi operator and others on the local network see encrypted data, not the websites or apps you use.

Encryption protects data in transit to our server. It does not hide your activity from websites where you log in, and it does not scan files on your device for viruses. You are still responsible for the security of your devices and accounts.

We use modern cipher suites as implemented in WireGuard and keep our apps updated. Details of what we never log are in our no-logs policy.

The controller responsible for data processing on this website and in our apps is:

Tunnelo LLC123 Main StNew YorkUSA

For privacy questions write to privacy@tunnelo.net. Full legal details are in the imprint.

When you create an account, we generate a random 16 digit account number and a recovery phrase. We store:

• Your account number, so you can log in.
• A hash of your recovery phrase. We can not read the phrase itself.
• The date your paid time ends.
• The public WireGuard keys of your devices, within your plan limit.

None of this is linked to your identity by default. If you ask us to delete your account, we remove this data promptly unless we must keep a minimal billing record for tax law.

Our servers run from RAM only and keep no logs of browsing. We do not store which websites you visit, your DNS requests, timestamps, bandwidth or session length after your session ends.

While you are connected, your public IP address is processed in memory so we can route traffic. It is not written to persistent logs and is not kept as a record of your activity once you disconnect.

To enforce device limits we keep a live counter of active connections in memory. It is never written to disk and disappears when you disconnect.

Tunnelo is not directed at children under 16. We do not knowingly collect personal data from children, and we do not profile minors or build advertising audiences from them because we do not run behavioral advertising on this service.

We do not intentionally intrude into the private life of children. We do not ask children for contact details to create an account, and we do not monitor the content of their communications through the VPN because we do not inspect traffic.

If you are a parent or guardian and believe a child gave us personal data, contact privacy@tunnelo.net and we will delete it where we are legally required to do so.

Teenagers may use the service with parental permission where local law requires it. Parents remain responsible for how minors use the internet on their devices.

You can pay with cryptocurrency, PayPal, credit and debit cards and other methods shown at checkout. Each provider has its own rules. Card and PayPal payments are handled by the payment processor, which may collect your name, billing address and card details under its privacy policy.

We receive what we need to confirm payment, fight fraud and meet tax law. That can include a receipt reference and, for some methods, billing details the processor shares with us. We do not link payment records to your browsing or VPN usage, because we do not log that usage.

Cryptocurrency payments usually involve less personal data, but blockchain transactions are public by design. Choose the method that fits your privacy needs.

Our hosting provider processes your IP address briefly to deliver this website. We do not keep long term access logs for marketing and we use no third party tracking or advertising pixels. Fonts are served from our own servers.

We do not set cookies for tracking. When you log in we store a technically necessary session in your browser, which is removed when you log out.

If you email us, we use your message and address only to answer you. We delete support conversations 90 days after they are closed unless law requires longer retention. Never send us your account number unless we ask for it to help you.

Under the GDPR you have the right to:

• Access the data we hold about you.
• Correct or delete it.
• Restrict or object to processing.
• Receive your data in a portable format.
• Complain to a data protection authority.

Because we hold minimal data, many requests are satisfied by deleting your account. Write to privacy@tunnelo.net for anything else.

If we change this policy we update the date at the top of this page. Important changes are announced on our website before they take effect.