This Privacy Policy explains how webservice.digital (“we”, “us”, “our”) processes personal data in connection with the Sentinel VPN platform, including the customer portal at sentinel.webservice.digital, WireGuard VPN access, the encrypted browser Web Proxy, optional public-relay browsing, account administration, billing, and related support.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law. This Policy is intended for customers, trial users, website visitors, and authorised operators.
1. Data controller
The controller responsible for processing is the legal entity operating webservice.digital as identified in the Imprint. For privacy enquiries use the Contact form or the contact address published in the Imprint.
2. Scope of the service
Sentinel provides account-based secure access services, including:
- WireGuard VPN - personal tunnel profiles, session start/stop, plan-based network assignment;
- Trusted Web Proxy (typically Premium and above) - browser access via Sentinel-owned egress with encrypted URL tokens;
- Public Web Proxy / experimental relays - optional browsing via third-party open proxies (available to eligible Guest and other plans when enabled), with explicit risk disclosure;
- Customer portal features such as referrals, billing, product changelog, and support;
- Operator tooling (administration, auditing, content management) for authorised staff.
3. Categories of personal data
Depending on how you use Sentinel, we may process:
- Account data - email address, display name (if provided), password hash, plan and status, verification state, referral relationships;
- Authentication and security data - login attempts, captcha/HEIMDALL challenges, MFA setup status, session identifiers, CSRF tokens;
- VPN operational data - assigned client IP, peer public keys (and encrypted private material stored for profile re-issue), session start/end times, plan/network mapping;
- Web Proxy operational data - timestamps, target hostnames/URLs (as needed to operate the proxy), egress IP or relay endpoint, HTTP status/size metadata, client IP, selected mode (trusted vs public relay), rate-limit counters; HTTP Basic credentials entered for destination sites are held only in server session memory for the duration of use and are not written to long-term proxy logs;
- Billing data - Stripe customer/subscription references, payment status metadata (card data is handled by the payment provider, not stored as full PAN on our systems);
- Communications - contact form messages, support correspondence, admin invite emails;
- Technical logs - server and application logs required for security, abuse prevention, and reliability (IP address, user agent, error traces);
- Preferences - UI theme choice, limited cookie preferences for theme/session.
We do not intentionally collect special categories of data (Art. 9 GDPR) through the core service. Please do not submit sensitive data via public relays or contact forms unless necessary.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide VPN and portal services under your account | Art. 6(1)(b) - contract performance |
| Operate Trusted and Public Web Proxy modules you choose to use | Art. 6(1)(b); Art. 6(1)(f) - secure operation |
| Billing, invoices, subscription lifecycle | Art. 6(1)(b); Art. 6(1)(c) where required |
| Security, fraud/abuse prevention, rate limiting, audit of privileged actions | Art. 6(1)(f) |
| Service communications (verification, config delivery, operational notices) | Art. 6(1)(b)/(f) |
| Improve reliability and diagnose incidents | Art. 6(1)(f) |
| Compliance with legal obligations | Art. 6(1)(c) |
5. WireGuard VPN - privacy notes
VPN access is bound to a registered account. We store technical identifiers required to issue and revoke your personal configuration (including encrypted key material for re-download) and session records to enforce plan limits and security controls. We do not sell browsing history. Destination traffic that exits through the VPN is processed solely to route and secure the connection according to your session and plan.
6. Encrypted Web Proxy (Trusted Sentinel egress)
When you use Trusted mode, browser requests are fetched by our infrastructure using Sentinel-owned egress. Destination URLs are transported in encrypted tokens bound to your account and expiry. We process operational proxy metadata (as above) to deliver the feature, prevent SSRF/abuse, and apply rate limits. Prefer Trusted mode for professional use.
7. Public Web Proxy (experimental third-party relays)
Important: Public/experimental mode may route traffic through third-party open proxies that we do not operate or control. Those relays can observe, modify, or log traffic. They are unsuitable for passwords, banking, confidential business data, or authenticated sessions to sensitive systems.
Where enabled, Guest and other eligible plans may access Public Web Proxy from the portal navigation after login. Use constitutes acceptance of the residual risk of third-party relays. We still apply technical safeguards on our side (authentication to the portal, encrypted URL tokens, SSRF protections, attempt limits), but we cannot guarantee the privacy or integrity of traffic on external relays.
Do not use Public Web Proxy where confidentiality is required. For higher assurance, use WireGuard VPN and/or Trusted Web Proxy on Premium or higher plans.
8. Cookies and local storage
We use strictly necessary cookies/session storage for authentication, security (e.g. CSRF), and essential preferences (e.g. UI theme). We do not use advertising cookies. If optional analytics scripts are enabled by an operator via the CMS snippet feature, those third parties process data under their own policies; such scripts are disclosed in the service configuration.
9. Recipients and processors
- Hosting and infrastructure under our operational control;
- Email delivery via the configured mail transport for transactional messages (verification, admin invites, optional WireGuard profile delivery);
- Payment processing via Stripe for Premium subscriptions;
- Optional analytics only if explicitly configured (e.g. insights.webservice.digital);
- Public relay operators (unrelated third parties) when you deliberately use Public/experimental Web Proxy - outside our instruction authority.
Where we engage processors, we do so under appropriate data-processing terms.
10. International transfers
Primary service infrastructure is operated in the EU where practicable. If a transfer outside the EEA is required (for example through a payment provider or a public relay you choose), we rely on appropriate safeguards or your explicit use of a feature that inherently routes data externally (Public Web Proxy).
11. Retention
- Account data - for the life of the account and a limited period thereafter for security, billing disputes, and legal claims;
- VPN sessions and proxy request logs - for operational security and abuse prevention, then deleted or aggregated;
- Audit logs of privileged admin actions - retained as needed for accountability;
- Contact messages - until handled and for a reasonable follow-up period;
- Backups - limited cyclic retention.
12. Security measures
We apply technical and organisational measures appropriate to the risk, including transport encryption (TLS), encrypted storage of sensitive secrets, password hashing, rate limiting, optional MFA for elevated access, VPN-gated administration, SSRF protections on the proxy module, and least-privilege operator roles. No method of transmission or storage is perfectly secure; residual risk remains, especially when using third-party relays.
13. Your rights
Subject to legal conditions, you may request access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. You may lodge a complaint with a supervisory authority (in Germany, typically your state data protection authority or the authority at our seat as stated in the Imprint).
To exercise rights, use the Contact form and include the email address of your Sentinel account.
14. Children
The service is directed at adults and organisations. We do not knowingly offer accounts to children under 16.
15. Changes
We may update this Policy to reflect product or legal changes. Material updates will be indicated by revising the effective date and, where appropriate, notice in the portal or product changelog for logged-in customers.
16. Contact
Privacy requests: Contact form · Legal entity details: Imprint.