Privacy policy

Who is responsible

Arte Soft EOOD operates this service. For privacy questions, access or deletion requests, contact office@arte-soft.com. This policy covers the US VPN iPhone and Mac clients, the VPN infrastructure and vpn.wonek.com.

What the VPN processes

To authenticate and route a connection, the service processes its source IP address, an installation-specific random key or its derived server identifier, a user or provisioning identifier, the selected server region, an assigned internal VPN address and connection state. The key is generated in the client Keychain; it is not a hardware serial number.

The VPN necessarily handles IP packets while forwarding them. Destination addresses and DNS traffic may be processed to deliver your requests. We do not build browsing profiles or intentionally retain browsing history or packet contents as a product feature. Do not treat this development service as an independently audited no-logs VPN.

Technical diagnostics can include connection times, transport mode, errors, latency, packet loss, queue timing and aggregate byte or packet counters. Development builds may store local diagnostic files, and server service logs may contain operational metadata.

How data is used

We use the data described above to provide the VPN, authenticate devices, isolate their connections, diagnose faults, protect capacity and estimate infrastructure use. We do not sell VPN data, use it for advertising or profiling, or disclose it to third parties for their own purposes.

No advertising SDK is embedded in this VPN client. This website does not load advertising trackers, analytics scripts or third-party fonts.

Infrastructure and IP verification

AWS and Hetzner provide infrastructure for the current pilot regions. Data traverses the region you select and may therefore be processed outside your country. Hosting infrastructure necessarily processes network traffic to deliver the service.

The client verifies its public exit IP through https://checkip.amazonaws.com. That service receives the public source IP and normal HTTPS request metadata. An IP shown as verified means the observed result matched the configured exit address at the time of that check; it is not a comprehensive leak test.

If you choose to share a diagnostic summary or email support, you choose its recipient. Review the content first; summaries may include an IP address and technical connection data. Never send passwords, device secrets or payment-card information.

Storage and deletion

Installation keys are held in the device Keychain. Server-side device-address leases persist so reconnecting devices keep their internal address. They remain until removed by an administrator. Uninstalling the client does not guarantee removal of Keychain entries or server records.

During this private preview, technical logs do not yet have a uniform automatic deletion schedule. They may remain until removed during troubleshooting or administration. Contact us to request access, correction or deletion. We may need enough information to locate your records; do not send your secret device key. We will identify any legal retention requirement that affects a request.

Support correspondence is retained as needed to resolve the request and meet applicable obligations. There is no public VPN subscription checkout on this site at present.

Your choices and rights

You can disconnect the VPN, review its region and protocol, and choose whether to share diagnostics. The app displays a data-use explanation before its first connection under this policy version.

Depending on applicable law, you may request access, correction, erasure, restriction, portability or object to processing. Contact office@arte-soft.com. You may also contact your data-protection authority, including the Bulgarian Commission for Personal Data Protection. Processing necessary to provide the requested service is based on that service relationship; operational security and fault diagnosis rely on legitimate interests, subject to your applicable rights.

Development limits and updates

The pilot is not directed at children. Automatic reconnection is not a claim of a fully audited kill switch. Hotspot traffic can take a different route. Dedicated-IP subscriptions and a global device-management portal are planned, not current public features.

Material changes to data collection, retention or paid services will be reflected in this policy and the relevant app disclosures before rollout.