Privacy policy

Last updated 13 October 2026

What is collected

To run an account, the service stores:

• your username,
• a hash of your password (never the password itself),
• which invite code you signed up with,
• a session token in a cookie, stored as a hash on the server, and when it was last used,
• your IP address, kept with the session and used to limit repeated failed sign-ins,
• how much data your account sends through the tunnel each month, as a total, so one account cannot use up the whole server.

The service does not keep a log of the pages you open through the proxy. The content of those pages passes through the server and is not stored.

Product analytics

If the operator turns analytics on, the service uses PostHog to see how its own pages are used. That covers only this site's pages: sign in, sign up, the address bar and the shell around the frame. It does not cover the websites you open inside the frame.

When analytics are on, the following is sent to PostHog:

• page views of this site's own pages,
• one event when you open a destination, containing only the hostname (for example wikipedia.org), never the full address and never what is on the page,
• your account's internal number, so events from one account group together. Your username and password are not sent,
• session recordings of this site's own pages. Everything you type is masked, password and invite fields are never captured, and the frame that shows the proxied website is blocked from recording.

PostHog processes that data on the operator's behalf and stores it in the United States, for as long as PostHog's default retention keeps it. If analytics are off, nothing is loaded from PostHog at all.

How long things are kept

• Sessions last 30 days from sign in, or until you sign out, sign in from too many browsers, or the account is disabled.
• Invite codes are kept so the operator can see which invite each account came from, including after they are used up or revoked.
• Monthly data totals are kept as totals, per month.
• Account records are kept until the account is deleted.

Deleting your account

Ask the person who gave you your invite. They can disable the account at once and delete it, along with its sessions and totals. Analytics data already sent to PostHog is removed according to PostHog's retention.

Cookies

One cookie, calc_session, keeps you signed in. The display preset for the tab title is kept in your browser's local storage and never leaves your device.

See also the terms of use. Back to sign in.