Privacy policy
This policy explains what personal data TorSentinel collects, why, how long we keep it, and what you can ask us to do with it. Activity on the VPN and proxy is covered by the no-logs policy.
1. Introduction
This privacy policy explains how TorSentinel ("we", "us", "our") collects, uses and safeguards personal data when you use our website or our services: Stealth VPN, Armor (a WireGuard VPN with forwarded ports and a SOCKS5 proxy) and Monitor (torrent IP leak alerts), together "the Service".
2. Who we are
TorSentinel is operated by a company registered in RAK Free Zone, United Arab Emirates. Contact: [email protected].
3. Data we collect
Account data
- Email address (needed to create an account and deliver the Service)
- Name, if you choose to give one
- Login timestamps and session information
- Plan and billing status
- Account preferences and settings
Service data
- Tracking torrent IDs generated for your account (Monitor)
- Announce and alert records from Monitor
- Safelist entries: trusted IPs, networks and domains
- VPN usernames, hashed passwords, WireGuard public keys and forwarded port assignments
- Service configuration and preferences
Technical data
- IP address of requests to the website, for authentication and security
- Browser and operating system information
- Cookies for login and session management (see the cookie policy)
What we do not collect:
- Torrent content or file names you download
- Websites you visit through the VPN
- Traffic content through the SOCKS5 proxy
- Card numbers (handled by the payment processor)
4. Payment processing
Card payments
We use Stripe for credit and debit card processing. Stripe handles your payment information on our behalf.
- We receive: payment confirmation, the last four digits of the card, the card brand and its expiry date
- We do not receive: the full card number or the CVV
- See Stripe's privacy policy
Crypto payments
Cryptocurrency payments are handled by a crypto payment processor.
- We receive: payment confirmation, the transaction hash and the amount paid
- Blockchain transactions are pseudonymous; no personal data is written to the blockchain
- Crypto payments are not refundable (see the refund policy)
5. How we use your data
- Service delivery: to provide, maintain and improve the Service
- Authentication: to verify your identity and secure your account
- Monitoring: to detect torrent IP leaks and send you alerts
- VPN and proxy: to authenticate your connections and route traffic
- Billing: to process plans, generate invoices and handle renewals
- Support: to answer questions and fix problems
- Security: to prevent fraud, abuse and unauthorised access
- Communications: to send essential service emails (alerts, billing, security)
6. Legal bases for processing
- Contract performance: to deliver the Service you bought
- Legitimate interests: security, fraud prevention and service improvement
- Legal obligation: compliance with applicable law
- Consent: where required for optional features or communications
7. Data sharing and disclosure
We keep no activity logs, so there is no browsing or torrent activity to share. Details are in the no-logs policy.
We never:
- Sell your personal data
- Share your data for marketing
- Give data to advertisers
- Log or inspect the content of your VPN or proxy traffic
8. Data retention
| Account data | Kept while the account is active, removed when the account is deleted |
|---|---|
| Billing records | 7 years, as financial record-keeping law requires |
| Monitor records | A rolling 24 hours of announces for active services; alert events while the service is active |
| VPN connection logs | None are kept |
| Support tickets | 3 years from the last message |
| Security logs | 1 year, for fraud prevention and security |
9. Security measures
Technical
- TLS for every connection to the website and the Stealth VPN gateway
- WireGuard encryption for the Armor WireGuard VPN
- Password hashing (bcrypt)
- Encrypted storage of service passwords
- Access logging and intrusion detection on our own systems
Organisational
- Access controls and authentication for staff
- Confidentiality obligations for everyone with access
- Incident response procedures
- Regular backups
- Data minimisation: we do not collect what we do not need
Your part: no system is completely secure. Use a strong, unique password, and tell us at once if you suspect someone else has used your account.
10. Your data rights
Subject to applicable law, you can ask us to:
- Access: give you a copy of your personal data
- Correct: fix inaccurate or incomplete data
- Delete: erase your data (you can also do this yourself on the delete account page)
- Restrict: limit how we use your data
- Port: give you your data in a machine-readable format
- Object: stop certain processing
- Withdraw consent: where processing is based on consent
To exercise a right: email [email protected] from the address on your account and say which right you want to use. We respond within 30 days; complex requests may take longer, and we will tell you if so.
11. Cookies and analytics
Essential cookies
- Session cookie: keeps you signed in
- Referral cookie: set only if you arrive through an affiliate link, so the referral can be credited
These are needed for the Service to work and cannot be switched off.
Website analytics
The website uses Google Analytics to count page views, traffic sources and rough locations. It sets its own cookies when a page loads. No analytics run on the VPN or proxy servers. The cookie policy lists every cookie and how to opt out.
12. Children's privacy
TorSentinel is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as our practices, technology or legal requirements change. Material changes are posted on this page with a new date at the top. Continued use after a change means you accept the updated policy.
14. Data breach notification
If a breach affects your personal data, we notify you at your registered email address and the relevant authorities as the law requires, within 72 hours of discovering it.
15. Contact
Questions about this policy or how we handle your data: [email protected]. A real person replies, usually within a few hours and always within 24 hours.