Privacy

Data processed: Email, password hashes, balance records, tunnel settings, ports or subdomains, connection sources and bidirectional traffic are processed for registration, authentication, billing and abuse prevention. Connection tokens are kept private.

Providers and location: Service nodes are in Japan. Resend delivers verification emails and receives recipient addresses and message content. Required lawful investigations and retention obligations apply.

Abuse prevention: Initial packets are inspected passively. SOCKS matches retain at most 32 bytes in hexadecimal; HTTP retains only a redacted method signature, without URI credentials or full packets. Automated detection can produce false positives; request administrator review.

Retention and rights: Operation, connection and abuse logs are retained for 90 days; daily database backups retain 30 copies. Contact [email protected] for access, correction or deletion, subject to accounting retention law. Language cookies last one year; local storage also remembers language. Session cookies support login and CSRF protection.