Privacy
Which data Colitu keeps, what it never records and for how long it stores things.
Colitu's principle: keep the least data needed to run the service and prevent abuse. This page lists plainly what we store. For the legal text, see the Privacy Policy.
What we never record
- The sites you visit, the apps you open or your search history
- The contents of your DNS queries
- The contents of the traffic that goes through the VPN tunnel
- The IP addresses of sites you visit while connected
What we keep and why
| Data | Why | Retention |
|---|---|---|
| E-mail address, hashed password | Your account | Until the account is deleted |
| Device name, platform, app version | Device slots and support | Until the device is removed |
| Sign-in time, IP address and country | Account security, spotting suspicious sign-ins | 180 days |
| Traffic volume (bytes) per user and server | Traffic limits, fair use | 90 days (then only monthly totals) |
| Refused device and trial attempts | Preventing abuse | 180 days |
| Trial abuse fingerprints | Stopping repeat trials by the same person | As irreversible hashes |
| Payment records | Accounting and legal obligations | For the legally required period |
| Support conversations and attachments | Solving your request | 2 years after closing |
| Colitu Bot conversations | Improving answers | 180 days |
Your card details never reach Colitu; payments are completed on the payment provider's secure page.
How is the country found?
The country of an IP address is looked up in a local database running on our server (DB-IP). Your IP address is not sent to a third party for this.
Your rights
You can ask for a copy of the personal data in your account, ask us to correct it, or ask us to delete your account. Just write to support. Details: Account management.
Was this article helpful?
Still need help?
Colitu Bot answers in seconds and hands you over to live support if it can't solve it.