This Privacy Policy describes how GetWireGuard.com ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website or use our VPN service. We are committed to protecting your privacy and handling your data transparently.

1. Data Controller

GetWireGuard.com is the data controller responsible for your personal data. If you have any questions or concerns about this Privacy Policy, please contact us at support@getwireguard.com.

2. Personal Data We Collect

We collect only the minimum personal data necessary to provide our service:

• Email address – required to create your account, deliver your WireGuard configuration file, and send service-related notifications.
• Payment information – billing details (e.g., last four digits of your card, billing country) processed securely through our payment provider. We do not store full card numbers on our servers.
• Subscription & transaction records – plan type, subscription start/end dates, and payment history needed to manage your account and comply with financial regulations.
• Support communications – messages you send us via email or our chat widget, retained to resolve your issues and improve our service.
• Website analytics – aggregated, anonymised data (page views, traffic source, device type) collected via Google Analytics to understand how visitors use our website. No personally identifiable information is included in these analytics.

We do not collect, log, or store your VPN traffic, browsing history, connection timestamps, assigned IP addresses, or DNS queries.

3. How We Use Your Data

We use your personal data solely for the following purposes:

• Provisioning and managing your VPN service account.
• Processing payments and issuing receipts.
• Sending transactional emails (welcome email, configuration file, renewal reminders, security notices).
• Responding to support requests and troubleshooting.
• Complying with applicable legal obligations.
• Detecting and preventing abuse, fraud, or violations of our Terms of Service.

We do not use your personal data for advertising, profiling, or any purpose unrelated to operating our service.

4. Legal Basis for Processing

• Contract performance – processing your email and payment data to provide the service you subscribed to.
• Legal obligation – retaining transaction records as required by applicable financial or tax regulations.
• Legitimate interests – preventing fraud, securing our systems, and improving service quality through anonymised analytics.
• Consent – sending marketing communications (you may opt out at any time).

5. Data Storage and Security

Your personal data is stored on servers located in secure, access-controlled data centres. We implement the following security measures:

• All data in transit is encrypted using TLS 1.2 or higher.
• Sensitive data at rest (e.g., passwords, configuration keys) is stored using strong cryptographic hashing or encryption.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.
• We conduct regular security reviews and apply patches promptly.

Despite these measures, no system is completely secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

6. Data Retention

We retain your personal data only as long as necessary:

• Account data (email) – kept for the duration of your subscription plus 90 days after account deletion, to allow reactivation or resolve disputes.
• Payment & transaction records – retained for up to 7 years to comply with tax and accounting regulations.
• Support communications – kept for up to 2 years after the issue is resolved.
• Analytics data – aggregated and anonymised; no retention limit applies as it cannot be linked to any individual.

7. Sharing with Third Parties

We do not sell, rent, or trade your personal data. We share data only with trusted service providers who help us operate our service, and only to the extent necessary:

• Payment processors (e.g., Stripe) – to handle billing securely. These providers comply with PCI-DSS standards.
• Email delivery providers – to send transactional and service emails on our behalf.
• Customer support tools (e.g., Chatwoot) – to manage support conversations.
• Website analytics (Google Analytics) – using anonymised, aggregated data only.

All third-party providers are contractually bound to handle your data only as instructed by us and in accordance with applicable data protection laws. We do not share your data with advertisers, data brokers, or government authorities except when legally compelled.

8. International Data Transfers

Our servers and some service providers may be located outside your country. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or equivalent mechanisms) to protect your data in accordance with applicable law.

9. Cookies and Tracking Technologies

Our website uses the following cookies:

• Essential cookies – required for the website to function (e.g., session management). These cannot be disabled.
• Analytics cookies (Google Analytics) – help us understand website usage. You may opt out via Google Analytics Opt-out.

You can control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to use our service.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access – request a copy of the personal data we hold about you.
• Right to rectification – request correction of inaccurate or incomplete data.
• Right to erasure – request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Right to restriction – request that we limit how we process your data in certain circumstances.
• Right to data portability – receive your data in a structured, machine-readable format.
• Right to object – object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please email us at support@getwireguard.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

11. Account Deletion and Data Removal

To delete your account and request removal of your personal data:

1. Email support@getwireguard.com with the subject line "Account Deletion Request" from the email address associated with your account.
2. We will cancel your subscription (if active), delete your account, and remove your personal data within 30 days, except for data we are legally required to retain (e.g., transaction records).
3. You will receive a confirmation email once your account has been deleted.

Please note that cancelling your subscription does not automatically delete your account or personal data. You must submit a separate deletion request.

12. Children's Privacy

Our service is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active subscribers of material changes by email at least 14 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: support@getwireguard.com
• Website: Contact Form

If you are located in the European Economic Area and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.