Privacy Policy

This Privacy Policy explains what information Railgun ("we", "us", "our") collects when you use the railgun.info website and network services (the "Service"), how we use it, and the choices you have.

The Service is designed around the principle of data minimization: we collect only what is necessary to operate the Service, authenticate you, prevent abuse, and comply with the law. It is used together with our Terms of Service.

Depending on how you use the Service, we may collect the following categories of information:

• Account information: the email address you use to sign in. Accounts are passwordless; we do not store passwords.
• Authentication data: one-time verification codes sent to your email address, and session tokens that keep you signed in.
• Service usage data: technical records required to operate the network, such as traffic volume, connection timestamps, and the relay nodes you connect to.
• Technical data: standard server log information such as IP address, user agent, and request timestamps, used for security, abuse prevention, and debugging.
• Billing data: if you purchase a paid plan, transaction records and the minimal account identifiers provided by our payment processors. We do not store full payment card details.
• Analytics data: aggregated usage statistics (for example, pages visited and approximate device or region) collected through third-party analytics tooling.

We use the information described above to:

• provide, operate, and improve the Service, including delivering sign-in codes and maintaining your session;
• authenticate you and protect accounts against unauthorized access;
• detect, prevent, and respond to abuse, fraud, and technical incidents;
• process payments and maintain transaction records where applicable;
• communicate with you about your account, service changes, maintenance, and security issues;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it for advertising profiles about you.

We do not inspect, record, or store the content of communications that pass through our network. We cannot see your browsing activity, messages, or the data you transfer while connected, except for the minimal connection metadata needed to route traffic and operate the Service.

We do not require your real name, phone number, or payment information to create an account.

We use a small number of cookies and browser storage mechanisms:

• session cookies that keep you signed in to the Console;
• browser local storage for non-sensitive preferences, such as remembering that you are signed in;
• security cookies used to distinguish legitimate visitors from automated traffic.

You can clear or block cookies and local storage in your browser settings. Some parts of the Service (such as staying signed in) may not work if you disable them.

We share personal information only in the following limited circumstances:

• Service providers: trusted vendors that help us operate the Service, such as email delivery providers and payment processors, bound by confidentiality and data-protection obligations.
• Analytics: third-party analytics services receive aggregated or pseudonymous technical data as described above.
• Legal requirements: where we believe disclosure is required by law, legal process, or government request, or where necessary to protect the rights, property, or safety of our users or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, information may be transferred as part of the transaction, subject to this Privacy Policy.

We retain personal information only as long as necessary for the purposes described in this policy:

• verification codes and short-lived session data are retained only for the period needed to operate authentication and are then deleted;
• technical and security logs are retained for a limited period appropriate to their purpose and then deleted or aggregated;
• account information is retained while your account is active, and for a reasonable period thereafter for record-keeping, dispute resolution, and legal compliance;
• billing records are retained as long as required by applicable tax and accounting law.

When you request account deletion, we remove or irreversibly anonymize your account information, subject to the retention requirements above.

We use reasonable technical and organizational measures to protect the information we hold, including encryption in transit (TLS) for our websites and APIs, access controls, and least-privilege practices for our infrastructure.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk. If we become aware of a security incident affecting your information, we will notify you where required by law.

The Service is operated globally and your information may be processed in countries other than your own, including countries whose data-protection laws differ from yours. Where required, we apply safeguards such as standard contractual clauses to protect transfers of personal information.

The Service is not directed to children. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected information from a minor, we will delete it. If you believe a minor has provided us personal information, please contact us.

Depending on your jurisdiction, you may have rights to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your account and associated personal information;
• object to or restrict certain processing, or request portability of your information;
• withdraw consent where processing is based on consent (for example, for optional communications).

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable period and as required by applicable law. Please note that we may need to verify your identity before acting on a request.

We may update this Privacy Policy from time to time. The current version is always available at railgun.info/privacy with its "Last updated" date. If a change is material, we will endeavor to notify registered users by email or through the Service.

Continuing to use the Service after a revised policy takes effect means you accept the updated policy.

If you have any questions about this Privacy Policy or how we handle your information, contact us at [email protected].