In this policy, MaskNet, “we” and “the service” mean the MaskNet secure internet connection service. It describes data handling on masknet.online, in the lk.masknet.online dashboard, in the Telegram bot and when supporting subscriptions. For data enquiries, contact support@masknet.online.
1. Account, subscription and support
Purchases by email use the address you provide to create your account, sign you in and contact you about the order. Using the bot involves your Telegram ID and the data you provide through that channel. Signing in with a connected external account uses the information needed for that sign-in method.
Subscription management uses an internal account identifier, plan, subscription dates and status, balance, device information and technical access data. Support enquiries include your message and files you send. Do not send passwords or unnecessary personal information.
2. Payments
Payment partners process payments. The MaskNet storefront does not accept bank card details. To record orders, credit funds and process refunds, the service uses payment amounts, dates, methods and statuses, transaction and subscription identifiers.
The payment partner's data processing terms apply on its page. The information and checks required depend on the payment method.
3. Website and analytics
The website receives your IP and browser information for operation, diagnostics and abuse prevention.
With your permission, we collect page view and click statistics, browser, device, language and visit source information. Analytics runs on MaskNet's server. IP and browser information are used to distinguish sessions. These statistics do not include the contents of traffic inside the secure connection.
You can withdraw permission through Cookie settings in the footer. After withdrawal, no new analytics data is sent. Contact support to request deletion of previously collected data.
4. Free tools
To determine the country, the website automatically sends your IP to api.country.is. Extended IP checks request city and provider information from ipwho.is. Address and domain checks send the information you enter to external diagnostic services. These requests are separate from analytics.
Browser characteristics for the fingerprint report are determined on your device. Password checks contact Pwned Passwords and send part of a digital fingerprint of the password, without the password itself. When contacted directly, the external service also receives the browser's IP.
5. Purposes and grounds
Account, payment and subscription data fulfils your order and provides the service; enquiries are used for support. Optional analytics is based on your permission. Technical processing supports website operation and security; payment records also serve applicable obligations.
The basis for processing depends on its purpose and applicable law: performance of a contract, consent, legal obligations or permissible legitimate interests in operating and securing the service. Merely visiting the website does not replace consent to analytics.
6. Recipients and countries
Providing the service involves hosting providers, payment and email services, the sign-in and communication methods you choose, and the tool data sources listed above. They may receive information needed for the relevant function. Data may also be disclosed where a binding legal requirement applies.
Connection infrastructure is located in the countries on the Locations page. This does not mean that all account data is stored in your selected location. External providers may process data in other countries. Contact support@masknet.online about specific recipients, countries and transfer conditions.
7. Retention and protection
Account and subscription data is used while needed for management and enquiries. Transaction data may be retained longer for refunds, disputes or mandatory records. Technical retention takes account of diagnostics and security purposes; analytics retention takes account of its statistical purpose.
Your cookie choice is valid for 180 days. This is the lifetime of your browser choice, not the server statistics retention period. Ask support about retention periods or criteria for specific data and request deletion of information no longer needed.
Protection measures include encryption in transit and access restrictions. No transmission or storage method guarantees absolute security.
8. Your rights and requests
You can request access, correction, erasure or restriction of processing, object to processing or withdraw consent. Where applicable law provides rights to data portability or to complain to a supervisory authority, those rights are preserved. Withdrawal does not affect the lawfulness of earlier processing.
Email support@masknet.online or open a dashboard ticket. To protect your account, we may need confirmation that the data belongs to you. Requests are handled within applicable legal deadlines; deletion may be limited by record-keeping obligations, refunds or disputes.
The current policy is published with an update date. Publishing an updated policy does not replace consent where it is needed for a new purpose.