Privacy Policy

1. What we collect

When you create a Latens account and subscribe, we collect:

• Email address — used for account authentication, billing receipts, and critical service notices (e.g. security alerts).
• Stripe payment token — a tokenised reference to your payment method, processed entirely by Stripe. We never see or store your card number, expiry, or CVC.
• WireGuard public key — generated on your device and used to establish your encrypted VPN tunnel. This is a cryptographic key, not an identifier.

That is the complete list. There is no analytics SDK, no tracking pixels, and no behavioural profiling.

2. What we do NOT collect

Latens is designed so that we cannot observe your activity, even if compelled to do so:

• Browsing history or URLs visited
• DNS queries
• Source or destination IP addresses
• Connection timestamps or session durations
• Bandwidth usage per session
• Traffic content or metadata

Our infrastructure is configured to disable logging at the operating system level. We cannot hand over data that does not exist.

3. How data is stored

Account data (email, WireGuard public key, subscription status) is stored in Cloudflare D1, a serverless SQL database. All data is encrypted at rest using AES-256. Access is restricted to authenticated API calls from our own Cloudflare Workers.

We do not operate traditional servers that could accumulate log files. Our architecture is serverless and ephemeral by design.

4. Third parties

We use two third-party services:

• Stripe — payment processing. Stripe handles all card data under PCI DSS Level 1 compliance. We receive only a token and subscription status. Stripe's privacy policy.
• Cloudflare — infrastructure (Workers, D1 database, DNS). Cloudflare processes requests to deliver the service but does not have access to decrypted VPN tunnel contents. Cloudflare's privacy policy.

We do not sell, rent, or share your data with any other party. We do not use advertising networks or analytics platforms.

5. Australian Privacy Principles

Latens complies with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth). While sole traders with annual turnover below $3 million are generally exempt from the APPs, we voluntarily adhere to them because we believe privacy compliance should be a baseline, not a legal obligation.

Specifically:

• We only collect information that is reasonably necessary to provide the service (APP 3).
• We are transparent about what we collect and why (APP 1, APP 5).
• We take reasonable steps to protect personal information from misuse and unauthorised access (APP 11).
• You can request access to, or correction of, your personal information at any time (APP 12, APP 13).

6. Data retention and deletion

We retain your account data (email, WireGuard public key, subscription status) for as long as your account is active.

When you cancel your subscription, your account data is retained for 30 days in case you change your mind. After 30 days, all data is permanently deleted from our systems.

You can request immediate deletion of all your data at any time by emailing hello@latens.net. We will process deletion requests within 5 business days.

7. Cookies

The Latens website does not use cookies for tracking or analytics. We may use a single session cookie for authentication if you log in to a dashboard. No third-party cookies are set.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to all active subscribers at least 14 days before taking effect. The "last updated" date at the top of this page will always reflect the most recent revision.

9. Contact

If you have questions about this policy or wish to exercise your privacy rights, contact us at: