PRIVACY POLICY

nadanada is committed to protecting your privacy. We believe that privacy is a fundamental right, and we have designed our services with this principle at the core.

This Privacy Policy explains how we collect, use, and protect your information when you use our VPN, eSIM, phone number, and AI chat services. Our approach is simple: collect as little as possible.

No Tracking Cookies: We do not use any tracking, analytics or advertising cookies. Browsing nadanada.me sets no cookies at all. The only exceptions are strictly necessary: a short-lived login cookie when you unlock your phone number dashboard with your PIN (it expires after one hour), and cookies set by Stripe to prevent fraud if you choose to pay by credit card.

No IP Addresses in Our Webserver Logs: Our website is reached through an encrypted tunnel, so our webserver logs never contain your IP address. They only record which page was requested, when, and with which type of browser, and they are automatically deleted after 7 days.

Security Logs: To protect our services, requests we block as suspicious, such as attack attempts, may be logged together with the IP address they came from. These security logs are automatically deleted after 5 days and are never used to track regular visitors.

DDoS Protection: Our website is protected by Cloudflare, which shields us from DDoS attacks and other malicious traffic before it reaches our servers, and processes connection data for this purpose.

No Account Required: You can use our services without creating an account, providing an email address, or completing any identity verification (KYC).

Key Generation: WireGuard keys are generated directly in your browser. Your private key is created on your device and never leaves it. We never have access to your private key.

What VPN Endpoints Store:

• Your WireGuard public key
• Pre-shared key (PSK)
• Total bandwidth used

IP Address Handling: While you're connected to our VPN, the endpoint temporarily keeps your IP address in memory to maintain the connection. If there's no activity for 5 minutes, the IP address is automatically deleted. We never store your IP address on disk or permanent storage.

No Activity Logging: We do not log your browsing activity, connection timestamps, DNS queries, or any other traffic data.

We prioritize privacy-enhancing payment methods:

• Bitcoin Lightning: We only verify if an invoice was paid. We cannot link your payment to a specific VPN endpoint or identify you.
• Monero: Provides the strongest anonymity as transactions are private by default.
• Other Cryptocurrencies: We accept various cryptocurrencies through MixPay. Payment data is handled by the payment processor. To meet our VAT obligations, we store only the two-letter ISO country code (for example DE) your purchase appears to come from. Your IP address is never stored for this.
• Credit Card (Stripe): When you pay with a credit card, Stripe processes your payment. We receive confirmation of payment but do not store your card details. Stripe's privacy policy applies to card payments.

For eSIM services, we store minimal data required for service delivery:

• eSIM identifier (ICCID)
• The phone number assigned to the eSIM, for eSIMs that come with one (Nada-Bundle)
• Purchased data bundles and their status
• Bundle activation and expiration information

We do not track your location, browsing activity, or mobile data usage beyond what is necessary for billing purposes.

Rental Numbers: For rental phone numbers, we store:

• Your unique user ID (used to access your dashboard)
• Phone numbers assigned to your account
• SMS messages received during your rental period (accessible only via your unique dashboard URL)

Rental numbers are not shared between users. Access is via a unique dashboard URL - no account or email required. SMS messages are accessible only through this URL; our staff do not access your messages. When a rental subscription expires, all stored SMS messages for that number are permanently deleted by an automated process.

No Conversation Storage: We do not store your conversations on our servers. Your chat history exists only in your browser session.

No Account Required: You can use the AI chat without creating an account, providing an email, or any personal information.

Session Data: When you close your browser or clear your chat, your conversation history is permanently deleted.

AI Providers: To answer your messages, your conversation is sent from our servers to the provider of the AI model you choose (for example OpenAI, Anthropic or Google). Because the request comes from our servers and not from your browser, the provider never sees your IP address. The provider's own privacy policy applies to how it processes the request.

Generated Videos: Videos you create are stored temporarily so you can download them, and are automatically deleted after 24 hours.

Email Delivery (SMTP2GO): All emails from nadanada.me are sent via SMTP2GO, and their privacy policy applies to email delivery. We only email you in these cases:

• When you ask for it: if you use a "Send via email" button, for example for your WireGuard configuration or eSIM link. Your address is only used to send that email and is not stored.
• After a purchase: if your payment provider (Stripe) shares your email address with us, we send you a link to your order so you can always find it again. This address is not stored either.
• Phone number reminders: if you add a reminder email to a rental phone number, we store it to remind you before your rental expires. You can remove it in your dashboard at any time, and it is deleted together with your rental 7 days after it expires.

Payment Processors: Depending on your payment method, third-party processors (Stripe, MixPay) may process your payment. Their respective privacy policies apply.

• Webserver logs: Deleted after 7 days
• Security logs: Deleted after 5 days
• VPN connection data: IP address deleted after 5 minutes of inactivity
• AI Chat: Not stored on servers
• Generated videos: Deleted after 24 hours
• eSIM data: Retained for service delivery and support
• Rental phone numbers: Messages retained during rental period, then permanently deleted when the subscription expires
• Reminder emails (rental phone numbers): Until you remove them, or 7 days after the rental expires

What we can provide: Because we collect minimal data by design, our ability to respond to legal requests is inherently limited. We do not log browsing activity, connection timestamps, or DNS queries. IP addresses are held only in memory and discarded after 5 minutes of inactivity. We cannot provide data we do not have.

How we handle requests: We evaluate every legal request on a case-by-case basis and will only comply with requests that are legally valid in our jurisdiction. We will not voluntarily provide user data to any government or third party outside of a binding legal process.

Abuse complaints: Abuse reports (e.g. DMCA, spam, or network abuse) can be sent to [email protected]. Because we do not log user activity, our response to abuse reports is limited to actions we can take at the network level.

Transparency: As of the last update of this policy, nadanada has not received any court orders, subpoenas, or national security requests compelling the disclosure of user data.

Because we collect minimal data and don't require accounts, there is very little personal data associated with your use of our services. If you have questions about any data we may hold, please contact us.

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Email: [email protected]
• Telegram: @nadanada_me
• X (Twitter): @nadanada_me

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.