BoltTunnel1. Information you provide
When you create or manage an account, we may process information you submit directly.
- Email address, display name, and password credential in hashed form.
- Account preferences and support communications.
- Subscription and billing status. Paddle processes full payment-card details as merchant of record; BoltTunnel does not store full card numbers.
2. Social sign-in information
If you choose Google, GitHub, or X sign-in, we receive the provider identifier and basic profile information authorized by you, such as display name, email address when available, and avatar URL. We do not receive your provider password.
3. Technical information
We may process limited technical information needed to protect and operate the service, such as request time, IP address, browser or device information, authentication events, security logs, and error diagnostics.
4. What we do not collect
BoltTunnel does not collect or store your browsing history, visited destinations, DNS queries, or the contents of your network traffic. We process only the operational metadata needed to authenticate accounts, enforce plan limits, account for aggregate traffic usage, and protect the service.
5. How we use information
We use information to provide accounts and sign-in, secure the service, prevent abuse, respond to support requests, comply with law, and improve reliability. We do not sell personal information or use private account data for hidden behavioral profiling.
6. Cookies and sessions
BoltTunnel uses essential cookies for sign-in sessions, security protections, OAuth state, CSRF protection, and language preference. These cookies are necessary for requested functionality and are not advertising cookies.
7. Sharing and service providers
We disclose information only when needed to operate the service, follow your instructions, protect users, or comply with valid legal requirements. Relevant providers include hosting, database, authentication, email, monitoring, and Paddle for payment processing and subscription administration. They receive only the information required for their role.
8. Retention and security
We retain information only for as long as it is needed for the purposes described above, account administration, dispute resolution, security, and legal obligations. We use access controls, password hashing, secure session practices, and other reasonable safeguards, but no online service can guarantee absolute security.
9. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal information, and to object to certain processing. You may also disconnect a social-login provider from the provider’s settings. Identity verification may be required before completing a request.
10. Updates and contact
We may revise this notice as BoltTunnel changes. Material changes will be highlighted through the website or account experience.
Privacy questions or requests can be submitted through the contact channel published on bolttunnel.com.