Privacy

The short version: running Roostwire means collecting some personal data. It falls into three buckets: registration details, billing records once you pay for something, and usage data collected automatically when you use the service. We collect it to run the service and to make it better, we sell none of it, and deleting your account deletes your data. Using the service means you agree to the collection and use described on this page.

Registration. Your email address, a scrambled form of your password (we cannot read it), your two-factor settings if you enable them, and the addresses and agents you create: names, ports, regions.

Billing. When paid plans arrive, we will keep your plan, payment status, and invoices. Card and payment details go to the payment provider, never to us; we see only what we need to know that you paid.

Usage data. Usage data is collected automatically when you use the service. That covers the website and the game traffic.

On the website, that can include your IP address, browser type and version, the pages you visit, the time and date of the visit, how long you stayed, device or browser identifiers, and other diagnostic data.

Cloudflare, which sits in front of the site, also tells us roughly where each visit comes from: country, state or province, city, and an approximate map position, all worked out from your IP address. When you create an address and don't pick a relay yourself, we use that position to put it on the relay closest to you. We use it for that one choice and don't save it.

On the game traffic, that can include connection addresses (yours, your agent's, and players connecting to your public address), ports, protocol, timestamps, how much data moved, and other diagnostic data from the relays and the agent. Player traffic passes through our relays to reach your server. We handle that traffic and may log those connection details.

We keep usage data to run and improve the service, to spot and stop abuse, to debug problems, to count load, and where the law requires it. It is kept only as long as those jobs need it, except when security or the law requires a longer hold.

Cookies, analytics, and similar technologies. We use cookies and similar tools. One keeps you signed in; others hold your settings. Our traffic measuring is our own and runs on our own servers. It counts totals, not people: which pages get viewed, how many visitors we had, which country they were in, and what kind of device they used. It sets no cookie, stores no IP address, and keeps no history of any one person. No third-party analytics service sees your visits. Our infrastructure provider (Cloudflare) sets its own cookies for security and bot protection. None of these are advertising cookies, and none of what they collect is sold.

Signing in with Google. If you choose to sign in with Google instead of a password, Google tells us two things: your email address, and Google's own account identifier for you. That is the whole list. We do not ask for your name, your picture, your contacts, your files, or anything in your mailbox. The address names your account and is how we reach you about the service; the identifier is how we recognise you on your next sign-in, so changing your Google address does not lose your account. We never receive your Google password. You can stop using Google sign-in at any time by setting a password instead.

Roostwire's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The bot check. Sign-in and the waitlist form use Cloudflare Turnstile to keep bots out, so those forms load a small check from Cloudflare. Our site also sits behind Cloudflare, as a large part of the internet does.

The services we run on. Roostwire runs on infrastructure we do not own: Cloudflare in front of the site, hosting providers underneath, and other services as the product grows. Some data necessarily passes through or is stored with them, sometimes in another country. We share only what the service needs to function, we choose providers carefully, and we do our best to keep your data protected wherever it is processed.

Links to other places. Pages here may link to sites and services we do not run: a game's website, a guide, a provider. Anything you share there is covered by their privacy policy, not this one, so look theirs over before handing anything across. We are not responsible for how other services handle data.

Nothing is sold, ever. No data goes to advertisers, brokers, or anyone else's marketing. Beyond the providers above, we would only hand information over when the law genuinely requires it.

Security. Protecting your data matters to us, and we work at it: passwords are stored scrambled, credentials are short-lived where possible, and access is locked down. Honesty requires saying the rest: no online service can guarantee absolute security, and we do not pretend otherwise. We do our best, and if something ever goes wrong we will tell you plainly.

Children. Roostwire is not for children under thirteen, which keeps us inside child-privacy law; that age can be higher where your local law says so. We do not knowingly collect a child's data, and if we learn we have, we delete it.

Deleting your account deletes your data. Your agents, addresses and ports go with it, immediately. Operational logs age out on their own.

Emails. We email you about your account and the service when it matters: security, verification, receipts, real changes. Anything promotional would be opt-in, and we have nothing promotional to send.

When this page changes. Changes are dated here and announced on the News page. Using the service after a change means the current version applies.

Questions, copies, corrections. Write to [email protected] to ask about your data, get a copy of it, or have it corrected or deleted.