Privacy Policy

Privacy isn't a setting at Safely.surf — it's the architecture. We cannot disclose, sell, or lose data we never collect. Our systems are designed to function without ever knowing who you are.

• No identity: no name, no phone number, and no email unless you voluntarily link one.
• No activity logs: we do not record the sites you visit, your DNS queries, or your traffic content.
• No connection logs: no source IP timestamps, session durations, or per-user bandwidth tied to your identity.
• No behavioral profiling: no advertising identifiers and no third-party trackers.

To operate a paid service, we keep the absolute minimum:

• A one-way hash (SHA-256) of your seed phrase — never the phrase itself. It cannot be reversed to reveal your key.
• Subscription state: your active plan and expiry date.
• Payment metadata: invoice IDs and amounts required for accounting and to confirm a payment cleared. We never see or store card numbers.
• Aggregate, non-identifying metrics: total server load and uptime, never linked to individuals.
• An optional email, only if you choose to link one for recovery or trial verification.

Our VPN nodes run entirely in volatile memory. Nothing is written to a persistent disk, and every reboot or key rotation wipes the node clean. There is no hard drive to seize and no historical state to recover.

We accept cryptocurrency (including BTC, USDT, and Monero) and Telegram Stars. Payments are processed by third-party gateways that receive only the data needed to settle a transaction. Choosing privacy coins or Telegram Stars keeps purchases free of banking paper trails. No KYC is required.

We use only essential, first-party browser storage to keep you signed in and remember your theme. We run no third-party advertising or analytics scripts, and we do not fingerprint your device.

We comply with valid legal process, but we can only ever produce the limited data described in Section 3 — which contains no browsing history and no identity. We cannot decrypt your traffic or reconstruct activity that was never logged. We also publish a warrant canary and periodic transparency reports.

We rely on infrastructure and payment partners (server hosts and crypto payment gateways) strictly to deliver the service. They receive the minimum data necessary and are bound by their own data terms. We do not sell or share your data with anyone for marketing.

Because seed-phrase accounts contain no personal data, you are effectively anonymous by default. If you linked an email, you may request its removal at any time. You can stop using the service and let your subscription lapse — your hashed credential becomes meaningless once expired.

Safely.surf is not directed to anyone under 18, and we do not knowingly create accounts for minors.

We may update this policy as the service evolves. Material changes will be reflected by the “Last updated” date above. Continued use after an update constitutes acceptance.