Privacy Policy
01 Overview
yue.lat ("we") is committed to protecting user privacy. This Privacy Policy explains how we collect, use and protect your personal information. By using the Service you agree to this policy.
We follow the principle of data minimisation — we collect only the minimum information needed to provide the Service.
02 Information we collect
| Data type | Contents | Purpose | Retention |
|---|---|---|---|
| Registration details | Email address | Sign-in, after-sales support, account recovery | For the life of the account |
| Password | Industry-standard one-way encryption | Authentication | For the life of the account |
| Transaction details | Order number, amount paid, payment method | Billing reconciliation | The period required by law |
| Data usage statistics | Total upload / download (aggregate figures) | Plan billing, fair use | The current billing cycle |
| Server monitoring | CPU / memory / disk / network interface metrics | Operations monitoring | Kept briefly, then cleared automatically |
| Online devices | Number of devices online at once (live count) | Enforcing the device limit | Live only; cleared on disconnect |
03 Information we do not collect
We never log the following. This is the core of our commitment to user privacy:
- Browsing history — the URLs or domains you visit
- DNS queries — a record of your DNS requests
- Traffic content — the contents of the packets you transmit
- Connection destinations — the specific IP addresses or services you connect to
- Connection timestamps — the exact times you connect to or disconnect from a given node
- Source IP address — your real IP address (the audit rules run on the node itself and send no logs back)
04 The audit system and your privacy
We run automated audit rules on the node side (see Terms of Service — Auditing rules) to block prohibited traffic automatically. To be clear about what that means:
- Audit rules run locally on the node and block by matching domain / IP / port / protocol. They do not send any user browsing data back to a central server.
- The audit system does not decrypt or inspect the contents of your encrypted traffic.
- Blocked traffic is dropped outright and produces no log entry.
05 Cookies and local storage
- Panel sign-in: authentication uses a secure token, stored in the browser's local storage.
- This website: browser local storage holds your theme preference (dark / light) and language preference. We use no third-party tracking cookies.
- We do not use Google Analytics, the Facebook Pixel or any third-party advertising tracker.
06 Data security
- All traffic between users and our servers is encrypted with TLS 1.3.
- User passwords are stored with industry-standard one-way encryption and cannot be reversed.
- All sensitive credentials are stored with industry-standard encryption.
- Database connections use encrypted channels and are not publicly reachable.
- Our servers set HSTS, X-Frame-Options, CSP and other security response headers.
07 Data sharing
We do not sell, rent or share your personal data with any third party, except:
- Where the law compels us (for example a court order) — but because we do not log browsing activity, even a valid demand cannot make us produce data that does not exist.
- Sharing the transaction details necessary to prevent fraud or abuse with our payment processor.
08 Your rights
- Access: you can view your account details, data usage and transaction records in the panel.
- Correction: you can update your email, password and other account details at any time.
- Deletion: you can request deletion of your account. Once deleted, personal information is permanently erased from our systems within 30 days (except where the law requires retention).
- Data export: you can export your subscription configuration from the panel. We do not offer an export of raw traffic data, because we do not record it.
09 Minors
The Service is not directed at people under 18. We do not knowingly collect personal information from minors. If we discover that we have collected a minor's data by mistake, we delete it immediately.
10 Changes to this policy
We may update this Privacy Policy from time to time. Material changes are announced on the website or on our Telegram channel. The updated policy is published on this page with a new effective date. Continuing to use the Service is deemed acceptance of the updated policy.
Contact us
If you have a question about this Privacy Policy, or you want to exercise your rights of access, correction or deletion, reach us through the Telegram support group or open a privacy and data request ticket.