Privacy Policy

The binding version of these terms is the Polish one. Translations into other languages are provided for information only; in the event of any discrepancy the Polish text prevails.

What data we process

• Account number — stored only as a cryptographic hash (HMAC); we do not know the plain form.
• Email address — only if you provide it voluntarily; used for payment confirmations.
• WireGuard public keys and tunnel addresses — required to provide the service.
• Connection metadata — time, destination address and port, exit address assignment; required by law and necessary to handle abuse. We neither record nor decrypt traffic content.
• Payment data — they are processed by the payment operator Stripe Payments Europe, Ltd. (Stripe); we only receive the transaction status. When you pay, Stripe collects a billing address — it establishes the buyer's country, which is required to settle tax. With a subscription we store the customer and subscription identifiers issued by Stripe — they are not card data and are useless outside Stripe.
• IP address at payment — we record the address and browser the order was placed from and keep them for 90 days. This is not advertising and does not depend on consent: the basis is our legitimate interest, because in a case of fraud against us or one of our partners the address and the payment date are the only things we can hand to the authorities.

What we never do

• We do not ask for your name. A billing address is provided only when you pay, because tax rules require it.
• We do not profile you based on how you use the service, and we do not sell data.
• We do not look inside your traffic — technically we cannot (the game TLS terminates on CipSoft servers).

Retention period

Connection metadata, event logs and reports sent from the app are deleted after 90 days — a background job does it, with no manual decision involved. Accounting records are kept longer: for the period required by tax law.

Cookies

Everything above concerns data from the KickShield service. This website is a separate matter: it uses measurement and marketing tools from Google and Meta, which run only after you consent and are covered by the GDPR on general terms. You do not have to consent, and you can withdraw consent at any time — it makes no difference to how the service works.

The list below is generated automatically and names every cookie this site uses — what it is for and how long it lives. You can change or withdraw your consent at any time.

Change consent

Your rights

Please send requests to delete personal data, and questions about how it is processed, to: [email protected]