[{"data":1,"prerenderedAt":311},["ShallowReactive",2],{"privacy-policy:en":3},{"id":4,"title":5,"body":6,"description":286,"extension":303,"meta":304,"navigation":306,"path":307,"seo":308,"stem":309,"__hash__":310},"content\u002Fen\u002Fpolicy.md","Privacy Policy",{"type":7,"value":8,"toc":285},"minimark",[9,14,23,26,30,35,38,51,56,64,69,72,77,80,85,88,93,96,101,104,108,125,129,132,136,139,191,197,201,204,208,211,215,218,222,225,238,242,245,249,252,256,259,263,266,270,275],[10,11,13],"h2",{"id":12},"_1-overview","1. Overview",[15,16,17,18,22],"p",{},"HiddenRoute is operated by ",[19,20,21],"strong",{},"Moreapps Limited",", incorporated in Hong Kong SAR (\"we\", \"us\", \"our\"). We are the data controller for the personal data described in this policy. This policy covers the HiddenRoute mobile applications, the HiddenRoute website and web dashboard, and the VPN service itself.",[15,24,25],{},"The short version: we do not log, inspect, or store the content of your traffic, the websites you visit, or your DNS queries. We collect the minimum needed to run accounts, subscriptions, and a reliable network — and we do not sell your data.",[10,27,29],{"id":28},"_2-what-we-collect","2. What We Collect",[15,31,32],{},[19,33,34],{},"Account data",[15,36,37],{},"The best protection for your data is us not having it, so signing up asks for exactly one piece of personal information: an email address. No name, no phone number, no physical address — and no passwords to store or leak, because we use one-time codes instead.",[39,40,41,45,48],"ul",{},[42,43,44],"li",{},"Email address (your sign-in identifier)",[42,46,47],{},"An internal account identifier (random UUID)",[42,49,50],{},"Subscription status (free or premium, and its expiry)",[15,52,53],{},[19,54,55],{},"Device data",[39,57,58,61],{},[42,59,60],{},"A device identifier (a random UUID generated for your device or browser; not your hardware serial number or advertising ID)",[42,62,63],{},"App version, device model, and operating system version (in crash reports and support emails)",[15,65,66],{},[19,67,68],{},"No activity logs",[15,70,71],{},"HiddenRoute keeps no logs of your online activity. We do not record the websites you visit, the content of your traffic, or your DNS queries while connected — nothing in our systems is designed to describe what you do online, and we keep it that way deliberately: the less we know about you, the less anyone could ever obtain from us. The applications contain no advertising and no advertising trackers, and do not access your contacts, photos, or precise location.",[15,73,74],{},[19,75,76],{},"Operational and security records",[15,78,79],{},"Like any account-based online service, we keep standard operational records: when a VPN session starts and ends, the server location and protocol used, and the device identifier. Sign-ins, connections, and account changes are recorded together with the network (IP) address the request came from, as part of normal account security. These records exist solely to run the network, enforce Free-tier session limits, and protect the Service against fraud and abuse. Because we keep no activity logs, these records show that the Service was used — never what for: they do not contain the websites, services, or content you accessed.",[15,81,82],{},[19,83,84],{},"Usage analytics (mobile apps)",[15,86,87],{},"The mobile apps use Google Firebase to collect basic product telemetry: connection attempts and outcomes (success, failure and its technical reason, connection setup time), selected server country, and your network type (Wi-Fi or cellular). This telemetry is associated with your account identifier. Crash reports (Firebase Crashlytics) include stack traces and device information. The web dashboard contains no analytics and uses no cookies.",[15,89,90],{},[19,91,92],{},"Payments",[15,94,95],{},"Payments are handled by Apple (App Store purchases), Stripe (web card payments), or a cryptocurrency payment provider (where offered). We never receive or store your card details — we only receive your subscription status. For crypto payments, the provider processes the wallet and transaction details.",[15,97,98],{},[19,99,100],{},"Support",[15,102,103],{},"If you contact support, we receive your message and the information you include. Support emails initiated from the app are pre-filled with your account identifier, app version, device model, and OS version — visible to you before sending.",[10,105,107],{"id":106},"_3-how-we-use-data","3. How We Use Data",[39,109,110,113,116,119,122],{},[42,111,112],{},"To provide and operate the Service: authentication, VPN session management, subscription entitlement",[42,114,115],{},"To enforce Service limits (e.g., free session duration, simultaneous connections) and prevent fraud and abuse",[42,117,118],{},"To respond to support requests",[42,120,121],{},"To understand reliability and improve the Service (connection diagnostics and crash reports)",[42,123,124],{},"To comply with legal obligations",[10,126,128],{"id":127},"_4-legal-bases","4. Legal Bases",[15,130,131],{},"We process personal data on the basis of: performance of a contract (providing the Service you signed up for); legitimate interests (network reliability, security, abuse and fraud prevention, product improvement); legal obligation; and consent where applicable law requires it.",[10,133,135],{"id":134},"_5-who-we-share-data-with","5. Who We Share Data With",[15,137,138],{},"We do not sell personal data. We share it only as needed with the payment, platform, and infrastructure providers that make the Service work:",[39,140,141,147,161,167,173,179,185],{},[42,142,143,146],{},[19,144,145],{},"Apple"," — App Store distribution and in-app subscription billing",[42,148,149,152,153,160],{},[19,150,151],{},"Stripe"," — web payment processing (independent controller for payment data; see ",[154,155,159],"a",{"href":156,"rel":157},"https:\u002F\u002Fstripe.com\u002Fprivacy",[158],"nofollow","stripe.com\u002Fprivacy",")",[42,162,163,166],{},[19,164,165],{},"Google Firebase"," — product analytics and crash reporting",[42,168,169,172],{},[19,170,171],{},"Adapty"," — subscription management and entitlement processing",[42,174,175,178],{},[19,176,177],{},"Resend"," — delivery of transactional email (sign-in and verification codes)",[42,180,181,184],{},[19,182,183],{},"Cloudflare"," — website, edge, and network infrastructure",[42,186,187,190],{},[19,188,189],{},"Hosting and datacenter providers"," — the servers that carry your encrypted VPN traffic in various countries",[15,192,193,196],{},[19,194,195],{},"Legal requests."," We respond only to valid legal process under the laws applicable to us, and we can only ever disclose what we actually hold. As described above, that is limited to account information and operational records. We hold no record of anyone's browsing activity — so no request, order, or data breach could ever produce one.",[10,198,200],{"id":199},"_6-international-transfers","6. International Transfers",[15,202,203],{},"Our providers process data in various jurisdictions, including the United States. Where required, transfers are protected by appropriate safeguards such as contractual data protection commitments with our providers.",[10,205,207],{"id":206},"_7-data-retention","7. Data Retention",[15,209,210],{},"We keep personal data for as long as your account exists and as long as necessary for the purposes described in this policy, after which it is deleted or anonymised. One-time sign-in codes are valid only for minutes and are not retained. Payment records may be retained as required by tax and accounting law.",[10,212,214],{"id":213},"_8-account-deletion","8. Account Deletion",[15,216,217],{},"You can delete your account from within the app or the web dashboard once any active paid subscription has ended (cancel auto-renewal first). When you delete your account, your VPN sessions are terminated, your access is revoked, and the personal data associated with your account is deleted or irreversibly anonymised, except where we are legally required to retain specific records.",[10,219,221],{"id":220},"_9-your-rights","9. Your Rights",[15,223,224],{},"Depending on your location, you may have the right to access the personal data we hold about you, request correction or deletion, object to or restrict processing, receive your data in a portable format, and withdraw consent where processing is consent-based.",[15,226,227,228,232,233,237],{},"To exercise any of these rights, email us at ",[154,229,231],{"href":230},"mailto:support@hiddenroute.app","support@hiddenroute.app"," or ",[154,234,236],{"href":235},"mailto:contact@moreapps.company","contact@moreapps.company",". We normally respond within 30 days. EU\u002FEEA and UK residents may also lodge a complaint with their local data protection authority.",[10,239,241],{"id":240},"_10-security","10. Security",[15,243,244],{},"Your VPN traffic is encrypted using modern protocols (WireGuard®\u002FAmneziaWG). Communication with our services uses TLS. In our mobile apps, VPN keys are stored in the operating system's secure storage and excluded from cloud backups; configuration files you download from the web dashboard are under your control, so store them securely. Authentication tokens are stored hashed on our servers. Access to production data is restricted to authorised personnel. No method of transmission or storage is 100% secure, but we take reasonable and appropriate measures to protect your information.",[10,246,248],{"id":247},"_11-children","11. Children",[15,250,251],{},"The Service is not directed at children and may not be used by anyone under 18. We do not knowingly collect data from children.",[10,253,255],{"id":254},"_12-changes-to-this-policy","12. Changes to This Policy",[15,257,258],{},"We may update this policy from time to time. The current version is always available at this URL with the effective date shown at the top. For significant changes, we will notify you in the app or by email where practicable.",[10,260,262],{"id":261},"_13-governing-law","13. Governing Law",[15,264,265],{},"This policy is governed by the laws of Hong Kong SAR, without prejudice to your right to lodge a complaint with a data protection authority in your jurisdiction.",[10,267,269],{"id":268},"_14-contact","14. Contact",[15,271,272,273],{},"Support and privacy requests: ",[154,274,231],{"href":230},[15,276,21,277,280,281,283],{},[278,279],"br",{},"\nUnit B, 11\u002FF, 23 Thomson Road, Wan Chai, Hong Kong SAR China",[278,282],{},[154,284,236],{"href":235},{"title":286,"searchDepth":287,"depth":287,"links":288},"",2,[289,290,291,292,293,294,295,296,297,298,299,300,301,302],{"id":12,"depth":287,"text":13},{"id":28,"depth":287,"text":29},{"id":106,"depth":287,"text":107},{"id":127,"depth":287,"text":128},{"id":134,"depth":287,"text":135},{"id":199,"depth":287,"text":200},{"id":206,"depth":287,"text":207},{"id":213,"depth":287,"text":214},{"id":220,"depth":287,"text":221},{"id":240,"depth":287,"text":241},{"id":247,"depth":287,"text":248},{"id":254,"depth":287,"text":255},{"id":261,"depth":287,"text":262},{"id":268,"depth":287,"text":269},"md",{"lastUpdated":305},"July 2026",true,"\u002Fen\u002Fpolicy",{"title":5,"description":286},"en\u002Fpolicy","g0dxxp3W7Qvk-9VH4Ul4d-gVsOAYqV_6bCLhZvQa-3Y",1784584716586]