Privacy Policy
Carol's VPN
Effective date: 2026-05-05
Carol's VPN is designed to provide encrypted VPN access through managed WireGuard infrastructure.
What we collect
- account email
- access-code authentication events
- device connection metadata needed to operate the VPN service
- server-side operational logs needed to maintain availability and security
What we do not collect
- browsing history for marketing purposes
- destination URLs for analytics
- content of your network traffic
- payment information inside the current MVP
Why we process data
- authenticate users
- issue VPN tunnel sessions
- operate and secure the VPN service
- investigate connection failures and abuse
Retention
Operational logs and session metadata are retained only as long as needed for service operation, security review, and support.
Security
Carol's VPN uses TLS for API traffic and WireGuard for VPN tunnel transport. Access codes are stored as salted hashes on the server.
Contact
For privacy and support questions, use the support page at /support.