Privacy policy. What we collect, why, and where it goes.

01 / What we collect

Website visits

Swetrix, an open-source analytics tool, runs on our servers, not a third party’s. It sets no cookies and counts page views anonymously: the page, where you came from, your rough country, and your browser and device type. Nothing that identifies you.

Nothing is sent to Google, Meta or any advertising network. Your IP address is used for a moment to work out the country and a daily-changing code that stops one visit being counted twice. Then it is thrown away, never stored.

Your account

If you have an account, we keep only what is needed to run it: your email address, your username, which apps you have been given, the record of you accepting the terms, and how much storage you use. Signing in is handled by our own Pocket ID service.

Your VPN profiles

For each VPN profile we keep its name, its public key, the private addresses it was given, and when it was made or removed. The private key is never kept: it is shown to you once, when the profile is made, and there is nowhere to store it.

What you keep in the apps

Your photos, files, passwords, bookmarks and other things you put in the apps are stored on servers run by us, for you. Nobody looks at them unless it is needed to keep the service working, for example to fix a fault or restore a file. Never out of curiosity, and never by an algorithm building a profile.

Email updates, if you choose them

Members can choose to get an occasional email when something changes on the network, such as a new app or planned work. It is off unless you turn it on, when you join or from your account page. We keep the address it goes to, when you chose it and the words you agreed to, and a record of which updates were sent to you. Turn it off at any time from any update email or your account page. Brevo, which delivers the emails, may record whether one was opened. We do not use that, and links in them are not tracked.

When you contact us

If you email us or open a support ticket, we keep your message, your email address and our reply. That is to answer you and for our records, nothing more. A support ticket also records the IP address it came from, so misuse of the form can be traced. It stays with the ticket and is used for nothing else.

Server logs

Our servers keep the usual technical logs: the IP address a request comes from, basic details of the request, whether services are healthy, and sign-ins. They are used to keep the service safe and fix problems, never to build a profile. They stay on our servers, are kept only as long as security and the law need, and are then deleted.

DNS, when you are on the VPN

When your device is on the VPN, the names it looks up are answered and filtered by the AdGuard Home we run, on the server at the end of your tunnel. Advertising, tracking and malware sites are refused there, before your device connects to them.

A log of lookups is kept on that server for up to 90 days so the filtering can be checked and tuned, then deleted. It is never shared. The device addresses in it are anonymised, so a lookup is not tied to a device. When you are not on the VPN, your own provider handles this and we see none of it.

What we never collect

No advertising tags, no fingerprinting, no social media buttons, no tracking across other websites, no data brokers. There is no profile of you to sell, because we never make one.

02 / Why we are allowed to

Who is responsible

GEE DIGITAL is the data controller under UK GDPR and runs itzgee.com. You can reach us at [email protected]. We rely on four lawful bases, and nothing else.

Legitimate interests

Anonymous analytics that never identify you, used only to see which pages are useful. Keeping the service safe with technical logs. Stopping misuse of the support form.

Contract

What is needed to give you the account you were invited to, and the apps and VPN profiles that come with it.

Consent

Email updates, and only if you choose them. You can withdraw it at any time, as easily as you gave it.

Legal obligation

Anything the law requires us to keep.

03 / Where it is kept

Where your data lives

In the UK, on servers run by us. Stored data does not leave the UK.

To be fair

The public website sits behind Cloudflare’s network, so a visit to it may pass through Cloudflare somewhere in the world before it reaches us. The data we store stays in the UK. We would rather say so than overclaim.

Companies we use

Kept to a minimum.

Cloudflare handles the website’s DNS and protects it from attacks.

Brevo delivers our emails: joining, account recovery, security notices, support replies and, if you choose them, email updates.

ipapi.is looks up an IP address to tell whether a connection is on the VPN and what is carrying it. Our server makes the lookup and sends only the IP address, for your account page and for ip.itzgee.com alike.

None of them receives anything for advertising.

ip.itzgee.com also runs checks from your own browser, which is the point of them: ipify.org and ipwho.is to read your address and where it is registered, dns.google when you look up a website name, and a public server run by Google or Cloudflare for the WebRTC check. Each of those sees your address directly, as any website you visit does.

How long we keep it

Only as long as it is needed and the law requires, then it is deleted. The analytics hold nothing about you that would need deleting.

04 / Your rights

What you can ask for

Under UK GDPR you can ask to see your data, correct it, delete it, limit what we do with it, get a copy to take elsewhere, or object to how we use it. We will do it without fuss.

How to ask

Email [email protected]. We may need to check it is really you before acting on account data.

Complaints

You can complain to the Information Commissioner’s Office at ico.org.uk at any time, though we would like the chance to put things right first.

Changes

If this policy changes in a way that matters, the version number and date at the top change with it.