Privacy Policy
Last updated: 2026-07-19
Svoboda Digital processes the minimum data required to deliver digital access, handle payments, provide support, and protect the service from abuse.
1. Data we process
Telegram IDs and interface language when you use the Telegram bot; technical access-delivery and recovery events; hashes of recovery credentials; public keys and fingerprints of added devices; payment statuses and provider identifiers; support messages; subscription status; issued-node status; and aggregated technical service counters. The app derives an irreversible SHA-256 proof from the personal-link token on the device to open one-time account access: the link and token are not sent to the server, and the proof is not stored. For aggregate measurement of the public website, we process the page path without its query string, referring hostname, approximate country, device type, browser, operating system, and loading performance. With separate consent, Google Analytics also receives a sanitized page URL, the referring source without its query string, approved UTM parameters, an approximate region, and clicks on payment and app-download buttons.
2. Purpose
Access delivery and renewal, refund handling, abuse prevention, support replies, node availability monitoring, capacity planning, and evaluation of advertising sources.
3. Legal basis
Performance of contract and legitimate interests in fraud prevention, operational security, and data-minimized measurement of the public website. Google Analytics is enabled only on the basis of separate consent.
4. What we do not store
We do not store the content of VPN traffic or keep a log of websites visited through the VPN. Technical telemetry is used for availability, speed, abuse, and infrastructure-limit monitoring, not to inspect the substance of your internet activity. We do not bind a visitor's raw IP address to a website-browsing history.
5. Retention
Web access logs are recorded without raw IP addresses or the requested URL and are rotated within 14 days. Routine operating-system and service logs are also limited to no more than 14 days. Analytics cookies expire within 180 days and are not automatically extended. Account, payment, and support records are retained only as long as needed for service delivery, refunds, abuse prevention, and legal obligations.
6. Payment providers
Card and PayPal payments may be processed by Stripe; other payments may use Telegram Stars or direct TON and USDT on TON. We store technical payment statuses and identifiers, but we do not store full card or PayPal credentials or keep wallet private keys on the server.
7. Website analytics and cookies
Public pages use cookie-free Cloudflare Web Analytics. Cloudflare does not collect query strings or UTM parameters, discards the source IP address after deriving an aggregate country, and exposes only aggregate page path, referring hostname, country, device type, browser, operating system, and loading-performance data to us. This beacon is not enabled on personal subscription, payment, rescue-access, gift, administration, authentication, speed-test, or warrant-canary pages.
Google Analytics is not loaded until you select “Allow analytics.” After consent, it receives a sanitized page URL, the referrer without its query string, approved UTM parameters and click identifiers from supported advertising campaigns, the site language, and events for opening the bot or downloading a client. Google uses raw IP addresses only to derive an approximate region and does not expose them to us. Automatic collection of forms, search, video, and arbitrary clicks is disabled. Analytics is not enabled on personal subscription, payment, rescue-access, gift, administration, authentication, speed-test, or warrant-canary pages. Your consent choice is stored locally in the browser and can be changed through “Cookie settings” at the bottom of the page.
If a public-page URL contains a valid campaign UTM parameter, the site keeps only its validated key for the current tab and adds that key to Telegram bot links. This lets us connect an acquisition source to access issuance and payment in aggregate without sending Telegram IDs, payment data, or personal access links to Google. Arbitrary URL parameters, referrers, and advertising click IDs are not forwarded to Telegram. This functional campaign key operates independently of Google Analytics consent.
8. Rights
You may request access or correction by contacting support@svoboda.digital. The steps, scope, and retention rules for deletion requests are described on our data deletion page.