Fast TunnelFASTTUNNEL

Privacy Policy

Last updated: March 23, 2026
1

Introduction

This Privacy Policy describes what personal data we may collect, how we use, protect, and disclose it. It applies to all Fast Tunnel products and applications.

We respect users’ right to privacy. We do not collect or use data for advertising purposes and do not associate network activity with specific users. The Service is designed to minimize the collection of personal data.

We process limited technical operational metadata, such as:

  • VPN connection start and end timestamps;
  • volume of transmitted bandwidth;
  • technical connection parameters.

Fast Tunnel does not sell personal data and does not use personal data for advertising purposes.

This data:

  • is used solely to ensure service quality, infrastructure stability, and prevention of abuse;
  • does not contain information about visited websites, DNS requests, or traffic content;
  • is automatically deleted on a regular basis in accordance with internal data retention procedures.

Fast Tunnel does not log visited websites and does not store internet traffic content. Only minimal operational metadata necessary to maintain service functionality is retained.

2

Categories of Data Processed

2.1 Information Provided by the User

2.1.1 Account

If registration is required to access the Service, we may process:

  • the user’s email address;
  • username (if provided);
  • a securely hashed password.

This data is used for access management, password recovery, and user support.

2.1.2 Payment Data

Payment information is fully processed by third-party payment providers. We do not store card numbers or banking details on our servers.

We may receive from payment partners:

  • confirmation of purchase status;
  • transaction identifier.

Payment data is processed directly by payment operators in accordance with their privacy policies.

This data is used solely for subscription management.

To purchase the Service, you may be required to provide us and/or our payment processing partners with personal information such as your billing name, billing contact details (for example, address and/or email address), and payment instrument details.

This basic billing information is used to process payments and refund requests.

2.2 Data Collected Through Applications

Identifiers used in the application:

  • are randomly generated on the device;
  • are not linked to email addresses or other identifying data;
  • are not used for advertising profiling;
  • are not shared with third parties.

Our applications are designed in such a way that technical identifiers are not linked to a user’s online activity.

2.2.1 Device and System Information

Collection may include:

  • device type, operating system, and application version;
  • time zone;
  • anonymous application identifier.

This information is used to ensure compatibility and troubleshoot errors.

2.2.2 Application Information

  • successful/unsuccessful connections;
  • selected settings.

2.2.3 Connection Information

We may process:

  • network type (Wi-Fi/mobile data);
  • VPN connection technical parameters (protocol, server).

We do not store data regarding visited websites or resources, traffic history, destination IP addresses, or traffic content.

2.2.4 Diagnostic Information

With explicit user consent, we may process minimal anonymous performance indicators (for example, statistics of successful connections). Such data does not allow identification of the user.

  • application crash logs;
  • error reports.
3

Data Processing

We process personal data only to the extent necessary for:

  • providing and supporting the VPN service;
  • fulfilling our obligations to the user;
  • performing technical diagnostics and improving the Service;
  • processing payments through payment providers.

We do not use data for:

  • advertising targeting;
  • marketing analytics without the user’s consent;
  • sale to third parties.
4

No-Logs Policy

We do not keep logs of:

  • visited websites;
  • DNS requests;
  • traffic content;
  • destination IP addresses;
  • associations between network activity and a specific user.

This is a fundamental element of our privacy approach.

5

Data Retention

Personal data is retained only:

  • for the period necessary to fulfill our obligations;
  • within the limits required by the laws of the user’s country;
  • for account management and subscription support purposes.

Upon the user’s request, personal data may be deleted unless such deletion is prohibited by applicable law.

6

Data Deletion

Deletion of Data and Account

The user has the right at any time to request deletion of their account and the personal data associated with it.

Deletion may be initiated by sending a request to the support email address: support@tunnel.fast

Upon confirmation of the request:

  • the account is deactivated;
  • personal data is deleted or anonymized;
  • operational metadata is deleted in accordance with the data retention policy.

Deletion effectively means:

  • deletion of the email address;
  • deletion of the account;
  • deletion of a linked dedicated IP address (if applicable);
  • deletion of other personal data that may have been provided by the user in the course of contacting technical support or during invoicing (if such data exists).

Personal data such as the email address, username, and other account-related data (if any) is deleted or anonymized within 30 calendar days from confirmation of the deletion request, unless otherwise required by applicable law.

After the account is deleted, personal data is deleted or irreversibly anonymized, and access to the Service is terminated.

We may retain a minimal amount of information where necessary:

  • to comply with legal obligations;
  • to resolve disputes;
  • to prevent abuse.
7

Technical Operation

Use of Network Interface

To provide the VPN service, the Application uses the user’s device network interface in order to establish an encrypted connection and route internet traffic through the Service servers.

During the operation of a VPN connection, technical connection parameters may be processed, including:

  • connection start and end timestamps;
  • volume of transmitted data;
  • protocol and server used;
  • technical connection status.

Such processing is necessary to ensure proper functioning of the Service, connection stability, and prevention of abuse.

The Application does not store internet traffic content, browsing history, or data relating to a user’s specific online activity.

7.1 Creation of Technical and Service Files

During operation, the Application may create and use:

  • temporary files;
  • cached data;
  • configuration files;
  • diagnostic logs;
  • technical files necessary for the functioning of the VPN connection.

Such data is used exclusively to ensure proper operation of the Service, troubleshoot technical issues, and improve system stability.

Technical data may be stored for the period necessary to ensure the operation of the Service, after which it is automatically deleted in accordance with internal data retention procedures.

7.2 Application Updates

The Application may receive updates, including automatic updates. Updates may include critical security fixes, bug fixes, and technical improvements.

If the Application is installed via official application stores (such as the App Store or Google Play), updates are distributed and installed in accordance with the rules and mechanisms of the respective platform. Automatic installation of updates in such cases depends on the User’s device settings and the platform’s policies.

If the Application is used on other platforms, including but not limited to Windows or Linux, updates may be provided through the built-in update mechanism of the Application or via the official Service website. In such cases, updates may be installed automatically or may require User confirmation, depending on system settings and Application configuration.

8

GDPR — Rights of Users in the EU

If you reside in the European Economic Area (EEA), you have the following rights:

  • the right of access to your personal data and to obtain a copy thereof;
  • the right to rectification;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to object to processing;
  • the right to data portability;
  • the right to withdraw consent to processing (where processing is based on consent).

We comply with the requirements of the General Data Protection Regulation (GDPR) with respect to lawfulness, transparency, and data minimization. Personal data is processed on lawful grounds such as consent, performance of a contract, or legitimate interests, where applicable.

9

Russian Personal Data Law

If the user is located in the territory of the Russian Federation, data processing is carried out in accordance with Federal Law No. 152-FZ “On Personal Data” and related regulations.

We:

  • ensure lawful processing of personal data;
  • ensure protection of personal data against unauthorized access;
  • provide the user with the right to:
  • access their personal data;
  • request correction;
  • request deletion;
  • withdraw consent;
  • obtain information regarding the processing of their personal data;
  • request transfer of personal data to another data controller, where applicable.
10

United States Data Protection Framework

We acknowledge that the United States does not have a comprehensive federal data protection law; however, various sector-specific laws apply (for example, the Children’s Online Privacy Protection Act (COPPA), which requires verifiable parental consent for the collection of personal data from users under the age of 13).

We:

  • do not knowingly collect personal data from children under the age of 13;
  • clearly specify the purposes of data processing;
  • disclose our data processing practices as required by applicable platform policies, including those of Apple and Google.
11

Disclosure to Third Parties

We may disclose data to:

  • payment providers — for the purpose of processing payments;
  • infrastructure providers — for the purpose of delivering and maintaining the Service;
  • competent authorities — in response to a lawful request.

We do not disclose data to third-party advertising networks.

12

Data Protection

We implement reasonable technical and organizational measures, including:

  • encryption;
  • restricted employee access;
  • regular security updates.

No security measures can guarantee 100% protection. Users are responsible for taking appropriate precautions to protect their personal information while using the internet or any other environment. We recommend that you take all necessary precautions to safeguard your personal information when operating online or in any other digital environment.

13

Technical Security of Connections

Security

All connections to Fast Tunnel servers are encrypted using modern cryptographic standards and VPN protocols.

Client authentication is performed through:

  • mutual TLS (mTLS);
  • validation of client and server certificates.

This ensures that access to the infrastructure is granted exclusively to authorized client applications.

Infrastructure edge nodes:

  • operate with minimal state persistence;
  • do not store user data on permanent storage media;
  • retain active session data exclusively in volatile memory (RAM);
  • delete session data upon termination of the connection.
14

Dedicated IP Address

A dedicated IP address is a unique IP address assigned exclusively to a user. The dedicated IP service is a subscription-based feature that provides a specific dedicated IP address to the user for the duration of the subscription period.

When purchasing a dedicated IP service:

  • the unique IP address is assigned to the account for the duration of the subscription;
  • the account email address may be technically associated with the dedicated IP address.

After the subscription period ends, the IP address may be reassigned to another user.

15

Disclosure Policy

Disclosure in Response to Legal Requests

In the event of receipt of an official legal request from competent authorities:

  • we verify the legality and formal grounds of the request;
  • our response is limited by the technical architecture of the Service;
  • we may provide only the data that is actually stored in the system, namely the minimal operational metadata described above.

Since the Service does not log visited resources or traffic content, such data does not exist within our infrastructure and cannot be provided.

16

Universal Compliance Principles

Legal Compliance and User Rights

Fast Tunnel complies with applicable personal data protection laws in all jurisdictions where the Service is provided, including, but not limited to:

  • Regulation (EU) 2016/679 (GDPR);
  • Federal Law of the Russian Federation No. 152-FZ “On Personal Data”;
  • applicable U.S. state privacy laws (including CCPA/CPRA, where applicable).

We apply the principle of data minimization and ensure transparency of data processing practices in accordance with the requirements of the relevant jurisdiction.

16.1 Jurisdictional Access Limitations

In certain countries, access to specific internet resources may be restricted in accordance with the laws of the respective jurisdiction.

The Service does not guarantee the ability to bypass all local restrictions.

The user is solely responsible for compliance with the laws of their country of residence or location.

17

Age Restrictions

The Service is not intended for individuals under the age of 18 (or a higher age threshold as required by the laws of your country).

If we become aware that we have collected personal data from a child below the applicable legal age without verified parental or guardian consent, we will take appropriate measures to delete such data.

18

Policy Changes

We may periodically update this Privacy Policy to reflect changes in legislation, the technical architecture of the Service, or data processing practices.

In the event of material changes:

  • the updated version of the Policy will be published on our official website;
  • users may additionally be notified through their personal account;
  • notification may also be sent to the email address provided during registration.

The effective date of the new version will be indicated at the top of the document.

Continued use of the Service after the changes take effect constitutes the user’s acceptance of the updated Policy, unless otherwise required by applicable law.

Contact

Contact Information

If you have any questions regarding our privacy practices or wish to exercise your rights, please contact us at: support@tunnel.fast