Privacy policy

1. Our data principle

QuickQ collects only what is required to run an account and a plan. Nothing else. This means we cannot reconstruct which services you reached, when, or what you transferred.

That is a property of the system rather than a marketing line: payloads are ciphertext between the client and the exit, exits do not parse content, and session state is never persistently linked to an account identity.

2. What we never collect

• Access records: which domains and addresses you reach, and over which protocol.
• Transferred content: message bodies, uploaded and downloaded files, request and response payloads.
• DNS queries: which domains you resolve; lookups go through an encrypted resolver inside the tunnel.
• Connection timing: the exact moments you were online or disconnected.
• Address mapping: the link between your real address and the tunnel address, held only in memory and destroyed when the session ends.

3. What the account system retains

Only the categories below, each with a defined purpose and retention period:

We do not store full card numbers, expiry dates or security codes. Payment processing happens entirely inside a PCI-DSS compliant third-party gateway and we receive only the transaction result.

4. Encryption and key management

• The client implements only WireGuard, IKEv2 and OpenVPN, with no private cryptographic modification.
• Mobile defaults to ChaCha20-Poly1305; desktops can switch to AES-256-GCM and other standard suites.
• Key agreement and integrity checks follow each protocol specification and provide forward secrecy.
• Internal access follows least privilege, with multi-factor authentication and audited operations.

5. Diagnostic reports

When you open a ticket and attach a report, it contains only the client version, protocol, handshake result, error codes and link-saving samples. It does not contain destination domains, transferred content or connection timing. You can stop the upload at any point and ask us to delete submitted attachments.

6. Third parties

• Payment providers: receive only the order information needed to settle a transaction, never network usage data.
• Facility and peering suppliers: provide links and equipment and cannot read inside the encrypted tunnel.
• Website analytics: aggregate measurement without third-party cookies, and no cross-site tracking or profiling.

We do not sell, rent or share your personal information for marketing purposes.

7. Your rights

• Access and export: review the account information we hold in the account centre.
• Correction: change your email address and account settings at any time.
• Deletion: request closure and we delete related data within 30 days, except records we must keep for tax purposes.
• Withdraw consent: unsubscribe from email at any time without affecting your account.

Submit such requests through the contact page and we will respond within 15 business days.

8. Policy updates and contact

If this policy changes materially we update the "last updated" date at the top and notify registered users by email. Continuing to use the service means you accept the revised policy.

• Privacy enquiries: [email protected]
• Technical support: [email protected]
• Live support: contact page, open year round