ZeroRoute is a private network operated by CS Development LLC ("we", "us"). Address: 37 / 3a Chavchavadze Avenue, Tbilisi, Georgia.
Access to the service is free and by invitation. Existing users may invite anyone, with no restrictions on whom they invite.
This policy applies to the ZeroRoute apps and use of the service through them, regardless of device or operating system. It explains what data we process, why we need it and how you can manage it.
Privacy enquiries: support@zeroroute.com.
Account. We store the name you provide, your email address if you add one, and a hash of your password if you set one. Passwords are never stored in plain text. An account created using a code may have no email address or password; access is provided through the code. We also store details of the account that invited you.
Messages. We keep the messages the service sends to your account — about your access, your traffic and your subscription — for as long as the account exists, at most 100 at a time. You can read them in the app and in the web panel.
Family accounts. We store the relationship between the primary account and its member accounts. The owner of a family account can see and delete the member accounts and devices linked to it.
Devices. For each registered device, we store its name, model, WireGuard public key and the time it last contacted the control server. The WireGuard private key is generated and stored on the device and is not sent to ZeroRoute.
Sign-in history. If the holder of a family account turns on sign-in history, we keep the time, IP address, app or browser version and device of the last 20 sign-ins to that account and to each member account under it. It is off by default. Turning it off deletes the history at once, and deleting the account deletes it with everything else.
Notifications. If you allow notifications, we store the push token Apple issues to your device so that we can deliver them. It is removed when you switch notifications off, remove the device, or Apple reports it invalid.
Node connections. We store information about which nodes each device uses. A record is created when a device first connects to a node and is deleted after seven days without use. It is created again the next time the device connects.
Traffic counters. The node reports the number of bytes each device has sent and received through the tunnel. This data is used to enforce quotas and assess node load. The counters do not contain the addresses of websites you visit, DNS queries or the contents of transmitted data.
Settings. We store the connection settings you choose. Depending on the features available, these may include automatic connection, blocking traffic if the tunnel disconnects, local network access and your preferred node order.
Feedback and support. If you send feedback from the app, we store the text, any contact details you provide and accompanying details about the app version, operating system and device model. Support emails are kept in our mailbox. Messages are accessible to the people who operate ZeroRoute and respond to users.
The app may check the availability of nodes and selected internet services and measure connection latency and speed. These checks may run to display results on your device whether or not you have allowed the results to be sent to us.
In clients that support optional sharing of results, it is off by default. While it is enabled, we receive:
This information helps determine which nodes and connection methods work on different networks. ZeroRoute sets the list of services to be checked.
You can turn sharing off at any time. No new check results are sent to us after that. Records already received are deleted according to the retention period below.
We do not keep server request logs, browsing histories or DNS query histories, store the contents of your traffic, or keep logs on our nodes of individual connections to the resources you access.
DNS. Name lookups made through the tunnel go to a public resolver, not to us. By default, and when the holder of a family account has turned on safe internet for a member, that resolver is Cloudflare's. When you turn on "Block ads and trackers" in the app, it is AdGuard DNS, which answers ad and tracker domains with nothing. Your queries travel through the node you are connected to on their way to the resolver, and the resolver's operator processes them under its own privacy policy. We do not record or keep them.
We do not request coordinates through your device's location services.
We do not access your contacts, photos or personal files, or collect advertising identifiers.
The apps contain no advertising or third-party advertising tracking tools. We do not supplement your account data with information about you from third-party sources.
We do not sell your data or disclose it to advertising networks, data brokers or advertising tracking services.
Disclosures in response to legally binding requests are described in section 11.
ZeroRoute nodes are located in various countries across Europe, Asia, North and South America, and Oceania. When you select a node, your traffic reaches the internet through a server in that country. The number and locations of nodes may change.
Using a node in another country involves processing network traffic in the country where that node is located.
Account details, devices, settings and traffic counters are kept for as long as the account exists.
Sign-in history, where it is turned on, is limited to the last 20 entries per account and is deleted when it is turned off.
Feedback and support correspondence are kept for as long as the account exists and are deleted with it.
Records of a device's connection to a particular node are deleted after seven days without use of that node.
Raw results of checks you choose to share are kept for up to seven days. They are stored by device identifier and are not linked to a deleted account. Aggregate statistics by node and network provider may be kept longer; they do not include IP addresses or other data that could link them to a specific user.
Removing a device. You can remove a registered device through the app. Its public key is removed from the service's records and its access to nodes is revoked.
Deleting an account. You can delete your account directly in the app using the "Delete account" feature. You do not need to contact support, send an email or submit a separate request, including if your account has no email address.
Deleting an account deletes all personal data associated with it: the account record, registered device details, their keys, settings, node connection records, traffic counters, feedback and support correspondence. The account's devices lose access to the nodes. Raw check results age out within seven days as described above.
Database backups are created hourly, and the three most recent copies are retained. Once a record is deleted from the main database, it is removed from these backups within three hours.
You can change the account details and settings available to you, manage devices and delete your account in the app. You can turn off optional sharing of check results at any time.
Where the GDPR applies to the processing of your data, our legal basis for data needed to provide the service is the performance of our agreement with you under Article 6(1)(b). For optional sharing of check results, our legal basis is your consent under Article 6(1)(a).
Withdrawing consent stops further optional sharing of results and does not affect the lawfulness of processing carried out before consent was withdrawn.
Subject to applicable law, you may access your data and obtain a copy, request rectification, erasure or restriction of processing, exercise your right to data portability and lodge a complaint with a competent data protection authority.
To exercise these rights, you can contact us at support@zeroroute.com. We may ask you to verify ownership of the account; having an email address on the account is not a requirement for verification. To delete your account, simply use the feature in the app.
We respond to GDPR requests without undue delay, normally within one month. If the law permits an extension, we will notify you and explain the reason.
Depending on the client and selected connection method, ZeroRoute uses WireGuard with AmneziaWG obfuscation or VLESS over TLS.
WireGuard private keys are generated and stored on your device and are not sent to ZeroRoute. Communication between the app and the control server is protected by TLS. Passwords are stored as hashes.
ZeroRoute is not specifically intended for children. A user under 16 may use the service through a member account created and managed by a parent or legal guardian.
The parent or legal guardian manages the child's access and can delete the child's account and remove their devices.
Where the law requires a parent's or legal guardian's consent to process a child's data, that consent must be obtained before the relevant processing begins. Creating a member account does not by itself replace legally required consent.
If a competent authority submits a legally binding request, we will review it and comply to the extent required by applicable law.
We can provide only data we hold. We cannot provide browsing histories, DNS query logs or stored traffic contents because ZeroRoute does not retain them.
If we change what data we collect or how we use it, we will update this policy and its revision date and notify you through the service. If a change requires new consent, we will obtain it before the relevant processing begins.
CS Development LLC
37 / 3a Chavchavadze Avenue, Tbilisi, Georgia.
support@zeroroute.com
This policy does not limit any rights granted to you by mandatory provisions of applicable data protection law.