Privacy policy
Last updated November 5, 2026
This policy explains what [TODO: legal entity name] (“Granitun”, “we”, “us”) collects when you use the Granitun website, apps and dashboard, why we collect it, and what we never do. We are the controller of the data described here.
1. Our no-logs commitment
We do not log your online activity. That means we do not record or store:
- the websites and services you visit through Granitun;
- the content of your traffic;
- your DNS requests.
We do not sell your data, we do not use it for advertising, and we do not share it with third parties except in the limited cases in section 5.
2. What we collect
We collect only what we need to run your account and the service.
| Data | What it is | Why we need it |
|---|---|---|
| Account | Your email address and a hash of your password (we never see or store the password itself). If you turn on two-factor authentication, the secret that generates your codes. | To create and secure your account and to contact you about it. |
| Sign-in sessions | The IP address, browser or app (user agent) and time of each sign-in to the website or dashboard. Sessions expire after 30 days. | To keep you signed in and to protect your account. |
| Devices | The name and platform of each device you add, an identifier and certificate fingerprint for it, and the time it was last seen. | To let your devices connect and to let you manage them. |
| Subscription and payments | Your plan and subscription period, and for each invoice the amount, currency, deposit address, transaction hash and timestamps. | To activate your subscription and to keep payment records. |
| Emails and support | The messages we send you, such as verification codes, and the messages you send us. | To run your account and to help you. |
| Service operation | Technical records of our systems, such as errors, kept for a short time. | To keep the service reliable and secure. |
We do not ask for your name, address, phone number or age.
3. How we use it
We use your data to provide and secure the service, to process payments, to contact you about your account and subscription, to answer your questions, to prevent abuse of the service and to meet legal obligations. We do not use it for anything else.
4. Payments and the blockchain
You pay in cryptocurrency, so we never receive card or bank details. Blockchain transactions are public and permanent: the deposit address of your invoice, the amount and the transaction hash can be seen by anyone and can’t be deleted by us or by you. We don’t link your wallet to anything beyond the invoice you paid.
5. Who we share data with
We do not sell or rent your data, and we do not share it for advertising. We pass data to others only when it is needed to run the service:
- Service providers that work for us, such as the provider that delivers our emails, the infrastructure and blockchain-node providers we use to host the service and confirm payments, and our hosting providers. They receive only the data they need for that job and may not use it for anything else.
- Authorities, when the law requires it. We can only hand over what we hold, which is the data in section 2. We have no activity logs to disclose.
6. How long we keep it
- Account, device and subscription data: until you delete your account or remove the device.
- Sign-in sessions: until they expire, after 30 days at most.
- Payment records: [TODO: retention period] after the payment, because we may need them for accounting and legal reasons. Public blockchain data can’t be deleted.
- Technical operation records: [TODO: retention period].
When you ask us to delete your account, we delete your account data within [TODO: number] days, except records we are legally required to keep.
7. How we protect it
Traffic between your devices, the dashboard and our servers is encrypted. Passwords are stored only as hashes, devices connect with short-lived credentials, and you can protect your account with two-factor authentication. No system is perfectly secure, but we limit what we collect so there is less to lose.
8. Cookies
The Granitun website does not use advertising or analytics cookies and does not load third-party trackers. The dashboard uses a cookie that keeps you signed in. It is needed for the dashboard to work.
9. Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or stop how we use it, or move it to another service. To use these rights, contact us at [TODO: contact email]. We will answer within the time the law sets. If you are not happy with our answer, you can complain to the data protection authority where you live.
10. Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change significantly affects how we handle your data, we will tell you by email or in the dashboard before it takes effect.
11. Contact
Questions about this policy or your data? Write to us at [TODO: contact email].