Privacy policy

1. Who we are

HomeAnchor ("we", "us", "our") operates the website www.homeanchor.io. We provide a VPN subscription service that anchors your internet connection to your home network, enabling remote work compliance, streaming, and location-based services from anywhere.

For any privacy-related questions, contact us at [email protected].

2. What data we collect

We collect the following categories of data:

Account and billing data

• Your name and email address
• Payment information processed securely via Stripe (we do not store card details)
• Subscription plan and billing history

VPN connection data

• Connection timestamps (connect and disconnect times)
• Bandwidth usage (aggregate, not per-site)
• Device type and operating system
• Client IP address at time of connection

We do not log the websites you visit, DNS queries, or the content of your traffic. We collect only the minimum connection metadata required to operate the service and enforce fair usage policies.

Web server logs

• IP address, browser type, and pages visited on our website

3. How we use your data

We use the data we collect to:

• Provide and maintain your VPN connection
• Process payments and manage your subscription
• Monitor service health, diagnose technical issues, and prevent abuse
• Send you account-related communications (e.g., billing receipts, service updates)
• Improve our infrastructure and service performance

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal basis (GDPR)

We process your data based on:

• Contract performance — processing necessary to deliver the VPN service you subscribed to
• Legitimate interest — maintaining service security, preventing abuse, and improving our infrastructure
• Legal obligation — retaining billing records as required by applicable tax and accounting law
• Consent — when you voluntarily provide data through contact forms or support requests

5. Data retention

VPN connection metadata is retained for 30 days and then automatically deleted. Billing records are retained for the duration required by applicable law (typically 7 years for tax purposes). Account data is deleted within 30 days of account closure, except where retention is legally required.

6. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email us at [email protected].

7. Cookies

This website uses only essential cookies required for the site to function (e.g., session management, authentication tokens). We do not use tracking cookies, advertising cookies, or third-party analytics.

8. Third-party services

We use the following third-party services:

• Stripe — for payment processing. Stripe processes your payment information in accordance with PCI DSS standards. Stripe privacy policy
• Cloudflare — for DNS, CDN, and DDoS protection. Cloudflare may process your IP address. Cloudflare privacy policy

9. Data security

We use industry-standard security measures to protect your data, including TLS encryption for all web traffic, encrypted VPN tunnels, access controls, and regular security reviews. Payment data is handled entirely by Stripe and never touches our servers.

10. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. For significant changes, we will notify active subscribers via email.