Privacy Policy
Last Updated: December 18, 2024
Effective Date: December 18, 2024
GetIP.online ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our free IPv6 tunnel service.
1. Information We Collect
1.1 Information You Provide
- Account Information: When you create an account, we collect your name, email address, and password (encrypted).
- OAuth Information: If you sign up using Google or Facebook, we receive your basic profile information (name, email, profile picture).
- Support Communications: Information you provide when contacting our support team.
1.2 Automatically Collected Information
- Connection Data: IPv6 addresses assigned to you, connection timestamps, and data transfer volumes (for service operation only).
- Device Information: Operating system, WireGuard client version, and device type (for compatibility purposes).
- Usage Data: Service feature usage patterns and performance metrics.
1.3 What We DON'T Collect
- We do NOT log your internet activity or browsing history
- We do NOT monitor or store the content of your communications
- We do NOT track websites you visit or services you use
- We do NOT sell or share your personal data with third parties
2. How We Use Your Information
We use the collected information for:
- Providing and maintaining our IPv6 tunnel service
- Managing your account and authentication
- Sending service-related notifications (tunnel expiry, maintenance)
- Improving our service performance and reliability
- Preventing abuse and ensuring network security
- Complying with legal obligations
3. Data Storage and Security
- Your data is stored in secure MongoDB databases with encryption at rest
- All data transmissions are encrypted using industry-standard protocols
- Passwords are hashed using bcrypt with salt
- We implement regular security audits and updates
- Access to user data is restricted to authorized personnel only
4. Data Retention
- Active Accounts: We retain your account data as long as your account is active
- Inactive Accounts: Accounts inactive for 12 months may be deleted
- Connection Logs: Basic connection metadata is retained for 30 days for service operation
- Deleted Accounts: Data is permanently deleted within 30 days of account deletion request
5. Third-Party Services
We use the following third-party services:
- Google OAuth: For authentication (see Google's Privacy Policy)
- Facebook OAuth: For authentication (see Facebook's Privacy Policy)
- Cloudflare: For DDoS protection and CDN services
6. Cookies and Tracking
- We use essential cookies for authentication and session management
- We do NOT use tracking cookies or analytics cookies
- You can disable cookies in your browser, but this may affect service functionality
7. Your Rights (GDPR Compliance)
If you are in the European Economic Area (EEA), you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing of your personal data
- Restriction: Request limited processing of your data
To exercise these rights, contact us at [email protected]
8. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or service notification. Continued use of our service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
12. Legal Basis for Processing (GDPR)
We process personal data based on:
- Consent: When you create an account and agree to our terms
- Contract: To provide the services you requested
- Legitimate Interests: For service improvement and security
- Legal Obligation: When required by law
Our Commitment
We believe privacy is a fundamental right. GetIP.online is designed with privacy by default - we collect only what's necessary to provide our service and never compromise your privacy for profit.