Privacy policy.

We don’t log what you do on the internet. We don’t record which sites you visit, which servers you connect to, what you upload or download, or how long you stay connected. The minimum we keep — your email and your billing record — is what we need to keep your account working. That’s the entire policy in one sentence; the rest of this page is the long version.

We collect three things, and only these three:

• Account email. So we can let you back in if you forget your password and so we can send a receipt for your subscription.
• Billing record. Plan, term, payment processor reference, last invoice timestamp. We never see your full card number — that lives with our payment processor.
• Aggregate health metrics. Stripped of identifiers: total simultaneous sessions per region, server CPU temperature, packet loss percentages. Used to keep the network healthy. Cannot be tied back to you.

We don’t keep, log, store, or transmit any of the following:

• Your real IP address (after the connection is established).
• The IPs of the servers you connect through.
• The websites or applications you use.
• The DNS queries you make through our resolvers.
• Connection timestamps, session lengths, or bandwidth used.
• Any traffic content. Your traffic is encrypted; we couldn’t read it if we wanted to.

Our infrastructure runs from RAM. There is no persistent disk on the data path. When a server reboots, every byte that wasn’t in flight at the time disappears.

The website you’re reading uses one cookie to remember your theme preference (light or dark), and one to mark whether you’ve dismissed the cookie banner. We don’t use third-party analytics, ad pixels, A/B testing trackers, or social media share trackers.

The apps make exactly one call when you sign in (to verify your subscription) and one to download server lists. There is no telemetry inside the apps unless you explicitly enable crash reporting in settings.

To run the service we share data with three companies, listed below. None of them ever sees your traffic; their access is limited to the specific purpose we list.

We’re domiciled in Panama and have no mandatory data-retention obligation. When we receive a request from any government, we publish it to our transparency report within seven days unless we’re explicitly prohibited from doing so. To date the canary has been maintained continuously.

A correctly-served subpoena targeting your VPN traffic returns nothing because nothing exists. We can only return the email tied to a billing record, and only if the order is enforceable under Panamanian law.

PlanetProxy is not directed at children under 13 (under 16 in the EEA). We don’t knowingly accept accounts from anyone under that age. If you believe a child has signed up, write to [email protected] — we’ll close the account and refund any payment.

You can access, correct, export, or delete the data tied to your account at any time — via the dashboard or by emailing [email protected].

GDPR and CCPA grant you specific rights — right to access, rectification, erasure, portability, restriction, and objection. We honour all of them and don’t require you to live in those jurisdictions to exercise them. We respond within 30 days, usually within 48 hours.

If we change this policy materially we’ll email every active customer at least 30 days in advance and post a redline diff to /blog. Trivial wording fixes go in without notice.

Questions? Privacy concerns? Disclosure?
Email [email protected] · Panama City, Panama.