Privacy.

The service

Your account is a random access key, issued by the app: four words, generated on the device. No name, email address, password, phone number or payment identity is attached to it. We cannot tell who holds a key, and we do not try.

We do not log where you go. Traffic, DNS lookups and connection records are not kept. The node forwards your packets and keeps nothing about them. The app’s Activity screen is a connection log kept on your device only; it leaves the phone only if you press Send.

What we do hold for a key is small: a hash of the key, its linked devices, its time left or subscription, and for card payers the payment processor’s customer reference. Entering your key on the website shows you all of it, and one button, Leave no trace, erases all of it at once, including the hash. Nothing is archived.

This website

streamtunnel.net sets no tracking cookies and runs no analytics. Nothing on it is loaded from a third party: fonts, scripts and images are served from this domain. The web server is configured not to keep access logs.

The one cookie we will ever set is a session cookie when you enter your key on the website to top up or manage devices. It holds a random session id and nothing else, and it goes when you sign out or the session ends.

There is no sign-up form and no email field anywhere on this site. It takes nothing from you.

Payment

Paying by card shows that you bought a VPN subscription, and nothing more: the payment processor sees the card, the name, the email address and the postcode it asks for, none of which reach us. The card page asks for an email address. You can use any email address here; we won’t send a receipt, and we will not email you unless you write to us first. We keep its customer reference against the account so a renewal credits the right key, and nothing else. Because nothing is logged, an account still cannot be linked to any activity.

For even more privacy, Monero is coming soon. It is private by design: the chain records no sender, no receiver and no amount, so there is nothing to tie a payment to an account. Bitcoin and USDT on Polygon come later, and both are public chains where an exchange that knows you may know what you paid for. Cash in the post comes later too, and leaves no record at all.

Who can see what

What each party on your route can and cannot see, with the tunnel working as intended.

• Your internet provider sees that you are connected to a node, when, and how much data moves. It does not see which sites you visit, your DNS lookups or anything inside the tunnel.
• The sites you visit see the node’s address, not yours, plus whatever you tell them: log in and they know who you are.
• A Streamtunnel node sees the sites and servers you connect to while you use it, not the contents of encrypted traffic such as HTTPS. It keeps no record of any of it.
• The owner of a node shared with you sees which sites you reach, when and how much, as any internet provider would, and your DNS lookups unless you set your own encrypted resolver. Use nodes shared by people you trust.
• Your own node sends traffic out on your connection, under your name, and your home provider sees it go.
• With multihop on, the first node sees your address but not your destinations, and the second sees your destinations but not your address.
• The card payment provider sees that you bought a Streamtunnel subscription and the card details it asks for. It never sees your key or anything the key did.

Who we are

Streamtunnel is run by a single United Kingdom company, STREAMTUNNEL LTD (company number 17533500, registered in England and Wales, registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ), which both takes the payments and runs the network.

The company exists so there is someone accountable. It is not what keeps you private. What does is that there is nothing to keep: no traffic, no DNS and no connection logs, so there is nothing to hand to anyone who asks, whoever asks and whatever law applies. Everything held for a key is listed on this page, and your account page erases all of it.

Support: support@streamtunnel.net. Security reports: security@streamtunnel.net. Card payments come with a 14-day money-back guarantee, and the unused part back pro rata after that. Monero and cash in the post cannot be refunded: anti-money-laundering rules stop us sending money back to an identity we never collected.