This Privacy Policy explains what information Harbor VPN ("Harbor," "we," "us") collects when you use our app and website, and — just as importantly — what we deliberately do not collect. Harbor is built around one rule: we can't disclose what we never recorded.
Information we collect
To run your account, we collect the minimum needed to bill you and keep the service working:
- An email address, used only for login and account notices
- Payment details, handled entirely by our payment processor — we never see or store your card number
- Aggregate, anonymized server load (total connections per server, not per user), used to route new connections to the least busy location
What we do not collect
- The websites, apps, or services you access while connected
- Your original IP address, once a session ends
- DNS queries made through the tunnel
- Connection timestamps tied to your identity
- Bandwidth or data usage tied to your identity
How we use information
The account details we do hold are used only to operate your subscription: authenticating logins, processing renewals, sending billing receipts, and responding to support requests you send us.
Sharing with third parties
We do not sell personal information. We share account data only with the vendors needed to run the business — our payment processor and our email delivery provider — and only the minimum data each needs to do its job. We do not share data with advertisers.
Government and legal requests
Because we do not log connection activity, we have nothing meaningful to hand over in response to a request about what a user did while connected. We will comply with valid legal process for the limited account data we do hold (such as billing records), and we publish a transparency report noting the number and type of requests we receive.
Data security
Server infrastructure runs entirely in memory (RAM-only), so data does not persist to disk between restarts. Account data at rest is encrypted, and access is limited to the small number of staff who need it to support the service.
Children's privacy
Harbor is not directed at children under 16, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will remove it.
Changes to this policy
If we make a material change to this policy, we'll update the date above and notify active subscribers by email before the change takes effect.
Contact
Questions about this policy can go to our Contact page, or directly to privacy@harborvpn.example.