Who we are
minitun is a VPN service that routes your connection through a secure tunnel so you can browse privately and freely. This policy applies to the minitun app and the accounts created through it. In this document, "we," "us," and "minitun" refer to the service operator; "you" refers to the person using the app.
Information we collect
We collect the minimum needed to run your account and keep the service working:
- Account credentials — a username and password you use to sign in. Passwords are stored only as a secure one-way hash; we never store them in a form we can read.
- Account status — your plan, expiry date, and whether your account is active, so the app knows what you're entitled to.
- Basic technical data — information needed to establish and maintain a connection, such as the amount of data transferred in a session (for showing your usage) and the app/config version, so we can support and update the service.
What we do not collect
minitun is built to see as little as possible. We do not monitor, record, or store:
- The websites you visit, the apps you use, or your DNS queries.
- The content of your traffic passing through the tunnel.
- A history of your assigned IP addresses or a log tying your activity to your identity.
How we use your information
We use the limited information above only to:
- Create and authenticate your account, and enforce its expiry and status.
- Provide the tunnel connection and show you your own session usage.
- Maintain, secure, and improve the service, and respond to support requests.
We do not sell your personal information, and we do not use your data for advertising.
Sharing your information
We don't share your personal information with third parties for their own use. We may share limited data only when strictly necessary to operate the service (for example, with the infrastructure providers that host our servers) or when we are legally required to do so by a valid legal request. Because we don't keep activity logs, there is little activity data we could ever produce.
Data retention
We keep your account information for as long as your account is active. When an account expires and is no longer needed, its associated records are removed on a routine basis. Session usage figures are transient and are not retained as a personal history.
Security
Connections are encrypted in transit, passwords are hashed, and access to account systems is restricted. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information and design the service to hold as little of it as possible.
Your choices
You can stop using minitun and request that your account be deleted at any time by contacting us. You may also change your password from within the app or through your reseller. If you have questions about the data associated with your account, reach out and we'll help.
Children's privacy
minitun is not directed to children under the age required by your local law, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will remove it.
Changes to this policy
We may update this policy from time to time. When we do, we'll revise the "Last updated" date above. Significant changes will be communicated through the app where appropriate. Continuing to use minitun after an update means you accept the revised policy.
Contact us
Questions about privacy or your data? Email us at privacy@minitun.xyz.