Privacy Policy
Effective Date: April 20, 2026
This Privacy Policy explains how TorSentinel collects, uses, and protects your personal data. We're committed to transparency and your data rights.
1. Introduction
This Privacy Policy explains how TorSentinel ("we", "us", "our") collects, uses, and safeguards personal data when you access our website or use our torrent privacy protection services including real-time monitoring, SOCKS5 proxy, and WireGuard VPN ("Service").
2. Who We Are
TorSentinel is operated by a company registered in RAK Free Zone, United Arab Emirates.
Contact: [email protected]
3. Data We Collect
Account Data
- Email address (required for account creation and service delivery)
- Name (optional, if provided)
- Login timestamps and session information
- Subscription plan and billing status
- Account preferences and settings
Service Data
- Test torrent IDs generated for your account
- Announce and alert logs from monitoring
- Safelist entries (trusted IPs, networks, domains)
- Port forwarding configurations
- Service configuration and preferences
Technical Data
- IP address (for authentication and security)
- Device information (browser, operating system)
- Cookies for login and session management
- Torrent content or file names you download
- Websites you visit through our VPN
- Traffic content through SOCKS5 proxy
- Full credit card numbers (handled by payment processors)
4. Payment Processing
Card Payments (Stripe)
We use Stripe for credit and debit card processing. Stripe handles your payment information securely on our behalf.
- We receive: payment confirmation, last 4 digits of card, card brand, expiration date
- We do NOT receive: full card number or CVV
- Stripe's PCI-DSS Level 1 certification ensures highest security standards
- See Stripe's Privacy Policy
Cryptocurrency Payments (BiglyPay)
We use BiglyPay for cryptocurrency payments. BiglyPay processes BTC, ETH, USDT, and other cryptocurrencies.
- We receive: payment confirmation, transaction hash, amount paid
- Blockchain transactions are pseudonymous
- No personally identifiable information is shared via blockchain
5. How We Use Your Data
- Service Delivery: Provide, maintain, and improve the Service
- Authentication: Verify your identity and secure your account
- Monitoring: Detect torrent leaks and send alerts
- VPN/Proxy: Establish encrypted connections and route traffic
- Billing: Process subscriptions, generate invoices, handle renewals
- Support: Respond to inquiries and resolve technical issues
- Security: Prevent fraud, abuse, and unauthorized access
- Communications: Send essential service emails (alerts, billing, security)
6. Legal Bases for Processing
We process your data based on:
- Contract Performance: To deliver the Service you subscribed to
- Legitimate Interests: Security, fraud prevention, service improvement
- Legal Obligation: Compliance with applicable laws and regulations
- Consent: Where required for optional features or communications
7. Data Sharing & Disclosure
We Offer Log-Less Policy.
- Sell your personal data to third parties
- Share your data for marketing purposes
- Provide data to advertisers
- Log or monitor your VPN/proxy traffic content
8. Data Retention
| Account Data: | Retained while account is active + Removed immediately upon deletion |
|---|---|
| Billing Records: | 7 years (legal requirement for financial records) |
| Monitoring Logs: | 24 hours for Active Services(rolling window) |
| VPN Connection Logs: | LogLess |
| Support Tickets: | 3 years from last correspondence |
| Security Logs: | 1 year (fraud prevention and security) |
9. Security Measures
Technical Measures:
- TLS/SSL encryption for all connections
- End-to-end encryption for VPN
- Password hashing (bcrypt)
- Encrypted database storage
- Regular security audits
- Intrusion detection systems
Organizational Measures:
- Access controls and authentication
- Employee confidentiality agreements
- Security training for staff
- Incident response procedures
- Regular backups
- Data minimization practices
10. Your Data Rights
Subject to applicable law, you have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete data
- Deletion: Request deletion of your data
- Restriction: Limit how we use your data
- Portability: Receive data in machine-readable format
- Objection: Object to certain data processing
- Withdraw Consent: Where processing is based on consent
To exercise your rights:
- Email [email protected] from your registered email
- Specify which right you wish to exercise
- We'll respond within 30 days (may be extended for complex requests)
11. Cookies & Tracking
Essential Cookies (Required)
- Session cookie: Maintains your logged-in state
- CSRF token: Protects against cross-site request forgery
- Security cookies: Authentication and fraud prevention
These cookies are necessary for the Service to function and cannot be disabled.
Analytics Cookies (Optional)
- Help us understand how the Service is used
- Identify performance issues and areas for improvement
- No personally identifiable information is collected
- Can be disabled in your browser settings
12. Children's Privacy
TorSentinel is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be posted on this page with an updated Effective Date. We recommend reviewing this policy periodically. Continued use after changes constitutes acceptance of the updated policy.
14. Data Breach Notification
In the unlikely event of a data breach that affects your personal data, we will notify you and relevant authorities as required by law. Notifications will be sent to your registered email address within 72 hours of discovering the breach.
15. Contact Us
Questions about this Privacy Policy or how we handle your data?
Email: [email protected]
Data Protection Officer: Available upon request