Privacy policy.

We don’t log what you do on the internet. We don’t record which sites you visit, the DNS queries you make, or what you upload or download — our tunnel carries your traffic without inspecting it. To run the account and keep the app working we do keep a few things — your email, your billing record, a per-install device identifier, the country you connect from, and (unless you turn it off) some product-usage and crash data. You can disable that analytics any time in the app under Settings → Privacy. The next sections list all of it, and what we deliberately never touch.

Here is everything we collect:

• Account email. So we can let you back in if you forget your password and so we can send a receipt for your subscription.
• Billing record. Plan, term, payment processor reference, last invoice timestamp. We never see your full card number — that lives with our payment processor.
• A device identifier and app version. A per-install identifier (which resets if you delete the app) plus your app version and platform, so we can run your account across devices and ship the right updates.
• Coarse connection region. The country you last connected from, derived once from your IP and stored as a two-letter country code — never the IP itself.
• Product analytics & crash diagnostics (optional). Which screens and features you use, which server you chose, and crash/performance data — tied to your account so we can fix bugs and improve the app. This is on by default and you can switch it off any time in Settings → Privacy. We never send your browsing, DNS, traffic, search terms, bandwidth, or session length to analytics. See Cookies & analytics for the providers involved.
• Aggregate health metrics. Stripped of identifiers: total simultaneous sessions per region, server CPU temperature, packet loss percentages. Used to keep the network healthy.

We don’t keep, log, store, or transmit any of the following:

• The websites or applications you use.
• The DNS queries you make through our resolvers.
• The destination servers your traffic goes to.
• How much bandwidth you use or how long your sessions last.
• Any traffic content. Your traffic is encrypted; we couldn’t read it if we wanted to.

Two clarifications, so the list above is not misread as more absolute than it is:

Session records. A VPN session record (the server you picked and when you connected) exists only while you are connected and is deleted the moment you disconnect; any stray record is purged within 30 days. It never contains your traffic, destinations, or IP.

Your IP address. We don’t attach your real IP to your browsing, and nothing about your traffic is tied to it. There are two narrow exceptions, both for account security and reliability rather than tracking: when you sign in we record the IP and device of that login so you can review and revoke your own sessions (kept about 7 days), and if the app or our servers hit an error, our crash-monitoring provider (Sentry) may receive the IP attached to that request while we diagnose it.

The website you’re reading uses one cookie to remember your theme preference (light or dark), and one to mark whether you’ve dismissed the cookie banner.

The app collects the product analytics and crash diagnostics described above, using Google Firebase (Analytics & Crashlytics), Mixpanel, PostHog, and Sentry. These receive app-usage events, your account and per-install identifiers, and crash/performance data — never your email, browsing, DNS, traffic, or the text you type. You can turn all of it off in Settings → Privacy; when off, these providers stop receiving data from your device.

The free tier shows ads through Google AdMob. We do not use the iOS App Tracking Transparency identifier (IDFA) and do not request tracking permission, so ads are not personalised to you across other apps. Subscribers see no ads.

To run the service we share data with the companies listed below. None of them ever sees your traffic; each one’s access is limited to the specific purpose we list.

We’re domiciled in Panama and have no mandatory data-retention obligation. When we receive a request from any government, we publish it to our transparency report within seven days unless we’re explicitly prohibited from doing so. To date the canary has been maintained continuously.

A correctly-served subpoena targeting your VPN traffic — the sites you visited, your DNS queries, what you sent or received — returns nothing, because we never keep it. What we can be compelled to produce is limited to the account data described above: your email, your billing record, and short-lived security logs, and only where the order is enforceable against us.

PlanetProxy is not directed at children under 13 (under 16 in the EEA). We don’t knowingly accept accounts from anyone under that age. If you believe a child has signed up, write to support@planet-proxy.com — we’ll close the account and refund any payment.

You can access, correct, export, or delete the data tied to your account at any time — via the dashboard or by emailing support@planet-proxy.com.

GDPR and CCPA grant you specific rights — right to access, rectification, erasure, portability, restriction, and objection. We honour all of them and don’t require you to live in those jurisdictions to exercise them. We respond within 30 days, usually within 48 hours.

If we change this policy materially we’ll email every active customer at least 30 days in advance and post a redline diff to /blog. Trivial wording fixes go in without notice.

Questions? Privacy concerns? Disclosure?
Email support@planet-proxy.com · Panama City, Panama.