Legal

Privacy policy

Draft — not yet reviewed by a lawyer. This text describes how the system actually behaves, but it has not been checked against the law of any jurisdiction. Have a solicitor review it before launch.

What we collect

A one-way hash of your licence key, an account ID, and records of your orders and devices. We do not collect an email address, a name, a postal address or a phone number, and we do not accept card payments — so no billing identity exists either.

What we use it for

Solely to run your subscription: to recognise you when you sign in, to know which plan you hold, and to know how many devices you have. We send no marketing, because we have no way to contact you.

Third parties

The website makes no third-party requests: fonts, styles and scripts are all served from our own domain, so no CDN or analytics provider sees your visit. Our server fetches exchange rates from a public price API; that request contains no information about you.

Cookies

One session cookie, set only after you log in, marked HttpOnly and Secure. No analytics, advertising or tracking cookies. There is no consent banner because there is nothing to consent to.

Retention

Account and order records are kept while your account exists. Ask us to delete your account and we remove the account and device records; order records may be retained where accounting law requires.

Your rights

Ask for a copy of what we hold, or ask for deletion, by emailing support@tarnvpn.com and quoting your account ID. Note that because we hold no identity for you, your account ID is the only way we can identify the record you are asking about — and we will never ask you for your licence key.