A clear account of the information this service handles.
Updated 6 September 2026
Account information
We store the name and email address you provide, a salted password hash, session records, tunnel settings and API-key metadata. API keys, connector tokens and session tokens are stored as hashes. The full value of a newly created key or connector token is only shown once.
Traffic and operational records
The relay processes requests to public tunnel addresses and forwards them to your connector. Request bodies are handled in memory, not deliberately saved in the application database. Tunnel request counts and server error logs support operations. Access logging is disabled on the HTTPS application and tunnel relay. Error logs may contain connection details; avoid putting secrets in URL query strings.
Cookies and third parties
The dashboard uses an essential, host-only session cookie for sign-in. This release does not include analytics trackers, advertising cookies or third-party tracking scripts. The service runs on AWS in the United States. DNS is managed through Hostinger. Original site illustrations were generated using OpenAI; visiting the site does not send your tunnel traffic to OpenAI.
Retention and account deletion
Sessions expire after seven days. Deleting a tunnel or revoking a key removes its active credentials and disconnects the affected connector. Use the account deletion control in the dashboard to delete your account, active sessions, tunnels and API keys. Operational server logs and backups may outlive account deletion under the server’s retention settings.
Your choices
Only publish information you have permission to share. Keep personal or sensitive content behind authentication in your own app. You can stop the connector, delete a tunnel or revoke a key at any time. This page describes the current beta implementation and will be updated as the service develops.