Privacy Policy

Data stored on your device

The app stores the following only on your device, in a container shared by the app and its network extension:

• configuration links and subscription addresses you add;
• the server lists received from those subscriptions;
• your routing rule sets and app settings;
• connection and core logs shown in the Diagnostics section.

This data is removed when you delete it in the app or delete the app. Logs leave your device only when you choose to copy or share them.

Data we do not collect

We do not collect or store:

• your network traffic or the content of your connections;
• the websites and services you open;
• your DNS queries;
• your public IP address;
• your configuration links, subscriptions or routing rules.

Connections the app makes

To work, the app contacts the following parties directly from your device. Each of them sees the IP address the request comes from, as with any internet request.

• The server you selected. Your traffic goes only to the server you choose. That server is run by you or by your provider, and its operator handles the traffic under its own rules.
• Your subscription address. The app requests it to receive and refresh the server list. The request goes straight to your provider.
• Activation links. Some providers issue a link that binds a subscription to a device. When you open such a link, the app creates a key pair, keeps the private key on the device and sends the public key to the service that issued the link, so the subscription can be delivered in encrypted form. That service may limit the number of devices. Deleting the subscription in the app releases the device slot.
• Geo databases. If your routing rules use geosite or geoip entries, the app downloads the database files from public GitHub releases.
• Latency and speed measurements. The latency check and the speed test send requests to Cloudflare endpoints (cp.cloudflare.com, speed.cloudflare.com). When a connection is active, these requests go through the selected server.

These parties process the requests under their own privacy policies.

Crash reports and diagnostics

The app sends crash reports and diagnostic events to Sentry, our error-monitoring provider. A report contains technical information such as the app version, the device model, the operating system version and the state of the app at the moment of the failure.

Reports do not contain your traffic, your configuration links or data that identifies you personally. They are not linked to your identity and are not used for tracking. We use them only to find and fix defects.

Camera and clipboard

The camera is used only to scan a QR code when you choose to. The image is processed on the device and is not saved or sent anywhere.

The clipboard is read only when you tap the paste action.

The website

The website tunnelist.app does not use cookies, advertising or analytics trackers. The hosting provider may keep standard server logs (IP address, time, requested page, browser type) for security and operation.

If you write to our support address, we process your email address and the content of your message to answer you.

Children

The app does not ask for personal data from anyone, including children. We do not knowingly collect personal data from children.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal data about you, and to object to its processing. Since the app has no accounts, we usually hold no data that identifies you. To make a request, write to the address below.

Changes to this policy

We may update this policy when the app changes. The current version is always published on this page with the date of the last update.

Contact

Questions about this document can be sent to the operator of Tunnelist.

• Operator: NORTHGATE DIGITAL LTD, Harbour House, 12 Welsh Back, Bristol, United Kingdom, BS1 4RN
• Email: support@welcomevpn.io