obscur network

This page is meant to inform users about the information obscur.network stores, in what conditions, and the exact limits under which it is kept and transfered. If you have any question that is not answered by this page, please contact us.

1. On This Website: Information stored

• Username
• E-mail address, if provided
• Password hash (PBKDF2)
• Messages sent as support tickets, device descriptions, and all other forms you fill.
• IP address used to browse This Website and log into your account.
• For payments and subscriptions, external identifiers to the associated payment processors.

This website has no external analytics software or advertisement network.

This information is strictly kept by obscur.network and will not be shared to a third party unless required by law (see 4.).

2. Authentication to the VPN

The event of connecting to our VPN servers is logged, so we know that a set of users were connected to our servers at any time.

For each connection or authentication, we store for up to a year:

• Username (OpenVPN) or Public Key (WireGuard)
• Server used (and shared server IP address)
• IP address and port of the device connecting
• Approximate amount of data transferred, for usage statistics, with a hourly or larger resolution.

This information is strictly kept by obscur.network and will not be shared to a third party unless required by law (see 4.).

2. On The VPN: Traffic

We hold no logs of the data you transmit through our VPN servers.
This includes: websites you browse with the VPN, DNS queries (incl. to our DNS servers), etc.

We will however watch for known specific patterns to limit abuse, exclusively used internally to avoid issues with our current server providers:

• Denial of service attacks
• BitTorrent connections to know public trackers (on servers indicated by a "NO-P2P" tag)
• BitTorrent traffic matching known CSAM info_hash values. (exact 20-byte SHA1 hashs)

This is strictly for internal use. We will not share this information but we might ban the account.

3. DMCA handling

DMCA cease & desists are usually ignored as we have very little control over it. If an account generates too many issues, we may investigate and revoke their access.

Because we cannot precisely identify users responsible for DMCA notices, we will ban from the server the account(s) online when most reports were received. If you think you have been banned unfairly, please open a ticket and we will reinstate your access to the server.

We will never disclose user information as a result of a DMCA notice.
We will forward the notice if possible, or suspend the accounts associated if needed.

4. Data requests & law enforcement

The French government may request informations about VPN connections and payments as required by French law. We will only comply to this kind of request if they are following the right legal procedure. If we are allowed to do so, we will attempt to disclose the event.

We pre-emptively refuse to actively cooperate with anyone trying to compromise our services' integrity, and we will shut the services down before letting it happen, if we have any choice.

No third party can request information without going through the proper legal channels, for what it's worth.