The short version
- We collect only what we need to run your account, take payment and prevent fraud.
- We don't log or look at the websites you visit through your IDNI address.
- We don't sell your data. We use ad measurement tools from Reddit and Google only if you accept them in our cookie banner, and you can change your mind anytime.
- Card details are handled by Stripe and crypto payments by NOWPayments. We never see your full card number.
Who is responsible
IDNI Digital, 1401 Lavaca St. #40356, Austin, TX 78701, USA ("IDNI", "we") is responsible for your personal data (the "controller" under the GDPR). Contact: support@idni.digital or our support form.
What we collect
- Account details: your name, email address, postal address, country and phone number if you give it, and your password (stored hashed).
- Order details: the plan and the location you picked, invoices, and support messages you send us.
- Payment information: Stripe processes card payments and gives us only limited details, such as card brand, last four digits and expiry, so we can show you which card is saved. NOWPayments processes crypto payments and tells us the payment status, amount and transaction ID.
- IP address and device information: our store records the IP address used when you sign up, log in and order, to protect your account and prevent fraud. Our web host keeps standard server logs (IP address, time, page requested) for security and troubleshooting.
- Free trial: When you sign up for a free trial, we keep a simplified copy of your email address, your phone number if you give one, and the IP address you ordered from. We use them only to make sure each person gets one free trial. We don't use them for marketing or share them, and the IP address check only looks back 12 months.
- Location of your IDNI address: to show where websites place your IDNI address in the client area, our server looks up that address (only the address, nothing about you) with IP2Location, GeoJS and, as a fallback, ipapi.is, and keeps the result for 30 days.
- "Where websites can see you" badge: on our homepage, your IP address is looked up in a location database on our own server to show your approximate city and country. The result is shown to you and not stored or logged by that feature, and your IP isn't sent to any third party for it.
Your browsing through IDNI
We don't record, inspect or keep the websites you visit or the content of your traffic through your IDNI address, and we don't build profiles of your browsing. To be fully transparent: your address runs on an upstream network provider's infrastructure, and like most network providers they may keep limited connection metadata (such as connection times, data volume and the IP addresses connecting to the proxy) for security, billing and legal compliance. We don't receive or use that data to track you, but we can't promise that a provider will never be required by law to keep or disclose it.
Why we use it (legal bases)
- To provide the service you ordered (contract): create your account, set up your address, send setup emails and invoices, and give support.
- To meet legal duties (legal obligation): accounting and tax records, responding to valid legal requests.
- To keep IDNI safe (legitimate interests): prevent fraud, payment abuse and misuse of the network, and secure accounts.
- Service emails: we send emails about your account and orders. We don't send marketing emails unless you've agreed, and you can opt out anytime.
- Ad measurement (your consent): if you click "Accept" in the cookie banner, we use Reddit and Google tags to count visits that come from our ads and completed orders. You can withdraw consent anytime with "Cookie settings" at the bottom of every page.
Browser extension
The IDNI browser extension for Chrome and Edge stores your connection details (IP address, port, username and password) and its settings only in your browser, on that computer, using the browser's own extension storage. They are not synced to your Google or Microsoft account and are not sent to us. The extension uses them only to sign in to your IDNI address. When you press "Check it works" (or switch it on), the extension asks IP2Location and GeoJS (MaxMind GeoLite2 data), or ipapi.is if IP2Location doesn't answer, which IP address and approximate location websites see; those requests come from your IDNI address and do not include your details. The extension has no analytics or tracking. "Remove my details from this browser" in its settings, or removing the extension, deletes everything it stored. More about the extension.
How long we keep it
We keep account and order data while your account is open. After you close it, we keep invoices and payment records for as long as tax and accounting laws require (typically up to 7 years) and delete or anonymise the rest within a reasonable time. Server logs are kept only for a short period.
Your rights
Wherever you live, you can ask us to access, correct, download (portability) or delete your personal data, and to stop marketing emails. You can update most details yourself in the client area.
- EU, EEA and UK (GDPR): you can also object to or restrict certain processing, withdraw consent where we rely on it, and complain to your local data protection authority.
- California (CCPA/CPRA) and other US states: you have the right to know what we collect and why, to delete and correct it, and to opt out of sale or sharing (we don't sell or share). We won't treat you differently for using your rights.
To make a request, email support@idni.digital or open a ticket. We'll verify it's you and reply within 30 days (45 days for California requests).
International transfers
IDNI is run from the United States and our providers may process data in other countries. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.
Security
We use HTTPS across the site, hashed passwords, and payment providers that meet PCI DSS. No system is perfectly secure, so please use a strong, unique password. If a breach affects your data, we'll tell you as the law requires.
Children
IDNI isn't for anyone under 18, and we don't knowingly collect children's data.
Changes to this policy
If we make significant changes, we'll update the date above and let active customers know by email or in the client area. Translations are provided for convenience; if they differ, the English version applies.
Questions about your data? Open a support ticket. Or email support@idni.digital.