We never modify, redirect, or inject data into users' traffic. We do not keep user activity details of any kind, and maintain the minimum amount of data required to authenticate users, route traffic through Geph servers, and process payments:

Username & password: For every user, we store a username, an Argon2 hardened password hash, and the time at which the user was created. We also keep track of all Plus users using opaque subscription IDs. We use this information for user authentication.

Transaction history: We store a list of all payment activity per user, which does not contain any information about the user's payment method.

Ephemeral session data: We temporarily store, in memory, information required to encrypt your traffic and route it through Geph's servers. This information is deleted after you disconnect, and is never stored persistently.

For more information, see our policies & terms of service.