Privacy Policy
Last updated 1 September 2026
This policy describes exactly what Nightjar stores and what it does not. It is written to match how the service is actually built, not to leave room.
What we store
- Your email address — to identify your account and contact you about billing.
- A hash of your password — we cannot read your password.
- Your subscription status and renewal date — to know whether your account is active.
- The public key, name and platform of each device you register, and the internal tunnel address assigned to it.
That is the complete list.
What we do not store
- No traffic logs. We do not record the sites you visit, the data you send, or anything you do while connected.
- No connection timestamps. We do not log when you connect or disconnect.
- No client IP addresses. Our request logs deliberately omit the address you connect from.
- No DNS query logs. Each server resolves DNS inside the tunnel with query logging switched off.
- No private keys. Your device generates its own WireGuard key and never transmits the private half. We hold only public keys.
Why we cannot read your traffic
This is a consequence of how the service is built rather than a promise about our intentions. WireGuard encrypts traffic between your device and our server using a key pair created on your device. We receive only the public key. We do not possess the material required to decrypt your traffic.
Payment information
Payments are processed by Stripe. We never see or store your card number. Stripe holds your payment details under its own privacy policy. We store only the subscription identifier Stripe gives us and your current billing status.
Legal requests
If we receive a valid legal request, we can only provide what we hold: an email address and a billing status. We have no traffic logs, no connection records and no means of linking a past session to a person, because that information is never written down.
Your rights
You may request a copy of your data or ask us to delete your account at any time by emailing support@nightjarvpn.com. Deleting your account removes your email, password hash, device records and subscription record. We respond within 30 days.
Changes
If we change this policy we will email every active subscriber before the change takes effect. We will not weaken these commitments without telling you first.