Privacy
- We do not log the traffic you send through the VPN.
- We do not log the sites, apps, or IP addresses you connect to.
- We store only what's needed to run your account: an account ID, a hashed credential, and the plan you're on.
- Payment identifiers stay with the payment processor. Crypto and cash-by-mail are supported for account creation without any identifier.
- Our servers run in memory only and are wiped on every reboot.
What we collect
To operate an account we store: an opaque account identifier, a salted hash of your login secret, the tier you have purchased, and the current billing period. Nothing here identifies who is behind the account.
What we don't collect
Connection timestamps, destination IPs, destination hostnames, DNS queries, bandwidth accounting per session, or any correlation between your account and the traffic that leaves an exit node. Because we don't have it, we can't share it.
Legal requests
If we receive a legal request, we can only respond with what we have: the account existed, the tier was X, the billing was current. There is no traffic log to hand over. We publish a warrant canary quarterly.
Cookies & analytics on this site
The pill.red website uses a single first-party session cookie for the account area. No third-party trackers, no ad networks, no fingerprinting. Aggregate visit counts are computed from server logs that are rotated within 24 hours.
Contact
Privacy questions: privacy@pill.red. PGP key on request.
This document is maintained by the Red Pill Project and is not a certification, legal opinion, or regulatory filing. Final policy language should be reviewed by counsel before publication.