Skip to content
background map


RoTunneling VPN — operated by RedShift IT SRL, Romania. Last updated: 17 October 2026.

1. Data we process

  • Account data: username, e-mail address, password (stored only as a hash) and, if you provide it, phone number.
  • Billing data: name or company name, address and tax ID, required to issue invoices by law. Card payments are handled by the payment processor; we do not store card data.
  • VPN session technical data: session start and end time, the public IP address you connect from, the internal IP address assigned to you and the traffic volume. We use it for authentication, to enforce the number of simultaneous sessions in your plan and to prevent abuse.
  • We do not record the content of your traffic and do not keep a history of the pages you visit through the VPN.
  • Protected DNS: when enabled, DNS queries are answered by our servers, which block domains known to be malicious or used for tracking. The app's "Disable security" option uses public DNS (1.1.1.1, 9.9.9.9) instead.

2. The RoTunneling VPN app

  • Your username and password are stored only on your device, in the system's secure storage (Keychain / Keystore).
  • The app contains no ads and no analytics or tracking SDKs.
  • To pick the fastest server and tune performance automatically, the app measures latency to our servers and may run a short speed test using Cloudflare (speed.cloudflare.com), which sees your public IP address. Test results stay on your device (diagnostics history) and can be deleted in Settings.
  • If you use an HTTP proxy, its credentials are stored only on your device.

3. The rotunneling.net website

The website uses cookies and third-party services: Google Analytics / Google Tag Manager and Meta (Facebook) for statistics, Cloudflare (including Turnstile anti-abuse protection) and Sleekplan for suggestions and feedback.

4. Legal basis and retention

We process data to perform our contract with you (providing the service), to meet legal obligations (invoicing, accounting) and for our legitimate interest in preventing abuse. We keep data while your account is active and afterwards for as long as the law requires.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Write to [email protected]. You may also lodge a complaint with the Romanian data protection authority (ANSPDCP, dataprotection.ro).



Tags: privacy, GDPR, personal data, VPN