Privacy Policy

1. Who we are

The service is operated under the Engarde name at https://engarde.cloud. For privacy requests contact hello@engarde.network.

2. What this service does

Engarde helps users reach websites and services when a direct path is restricted, via a peer-assisted network and optional paid subscriptions. Engarde is not an anonymity product and is not legal protection for unlawful activity.

3. Data we process

• Account. Email address; session cookie; activation key tied to your account; subscription and invoice status.
• Persona Claims login. When you sign in with Persona Claims we store the verified contact.email claim to identify your account. We do not request or store name or date of birth from Persona.
• Payments. Email for receipts and access; phone number when you pay via Russian card / SBP; payment method; amounts; provider references. Card numbers are handled by payment processors — we do not store full card PAN or CVV.
• Circles and network control plane. Circle membership, invite codes you create, presence/heartbeat metadata, and exit-node catalog announcements needed to run the service.
• Technical logs. Basic server logs (for example IP, timestamps, request paths) for security, abuse prevention, and reliability.
• Desktop / network path. Traffic you route through Engarde is encrypted in transit. Global-circle exits are operated by Engarde; private-circle exits are other members you choose to trust.

4. Why we process it

• Provide accounts, login, activation, and paid or gifted access
• Process payments and prevent fraud
• Operate circles, catalog, and bootstrap APIs for the desktop client
• Secure the service, investigate abuse, and comply with law
• Respond to support requests you send us

Legal bases under GDPR (where applicable): contract performance, legitimate interests in running a secure service, and legal obligation where required.

5. Processors and third parties

• Stripe — global card checkout and Customer Portal
• Xchange — card / SBP payments for Russia
• Solana / USDC infrastructure (including webhook providers such as Helius) — crypto payments
• Persona Claims — wallet login; we request only contact.email
• Email delivery (Postal or equivalent) — magic-link login messages
• Hosting / CDN — servers that host engarde.cloud

Those providers process data under their own terms and privacy policies. Blockchain payments are inherently public on-chain.

6. Cookies

We use an essential session cookie (engarde_session) to keep you signed in. We do not use advertising trackers on the marketing site as part of the core product.

7. Retention

Account and billing records are kept while your account is active and as long as needed for accounting, dispute handling, and legal retention. Session cookies expire according to their lifetime (up to about 30 days unless renewed by use). You may ask us to delete account data where law allows; we may retain limited records where required (for example paid invoices).

8. International transfers

Payment and identity providers may process data in the EU, US, or other countries. Where required, we rely on appropriate safeguards offered by those providers.

9. Your rights

Depending on your location you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing. Contact hello@engarde.network. You may also complain to your local supervisory authority.

10. Children

The service is not directed at children under 16. Do not create an account if you are under the age required in your country.

11. Security

We use HTTPS, access controls, and least-privilege practices appropriate to a small control-plane service. No method of transmission or storage is perfectly secure.

12. Changes

We may update this policy. The “Last updated” date will change; continued use after publication means you accept the updated policy where permitted by law.

13. Contact

Privacy questions: hello@engarde.network
Service: https://engarde.cloud