Privacy Policy

1. Introduction

SwiftTunnel ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our connection service. SwiftTunnel is an open-source project — our desktop application is released under the MIT License and its source code is publicly available. This policy covers the hosted service and any data collected through it.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Password (stored securely hashed)
• Account creation date

2.2 Connection Configuration Data

When you generate connection configurations, we store:

• Public keys (for authentication)
• Assigned tunnel IP addresses
• Selected server regions
• Configuration creation timestamps

2.3 What We Do NOT Collect

We are committed to a minimal data collection approach. We do NOT collect or store:

• Your browsing history or traffic content
• Connection logs (timestamps of connections)
• Your original IP address
• DNS queries made through the optimizer
• Bandwidth usage data per user
• Any activity logs while connected

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Generate and authenticate connections
• Provide customer support
• Send service-related communications
• Improve and optimize our Service
• Detect and prevent abuse or fraud
• Comply with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS/SSL
• Passwords are hashed using secure algorithms
• Database access is restricted and monitored
• Regular security audits and updates
• Connection private keys are only stored on your device, never on our servers
• Our desktop application source code is publicly auditable on GitLab

Your data is stored on secure servers provided by Supabase, which maintains SOC 2 Type II compliance and implements robust security practices. Because our application is open source, anyone can inspect exactly what data the software collects and transmits.

5. How the Desktop Application Works

For full transparency, here is what the SwiftTunnel desktop application does on your system. The entire source code is available on GitLab for independent verification.

5.1 What It Launches

The app requires Administrator privileges and will prompt for elevation via UAC on launch. It uses the Windows Packet Filter (WPF/ndisapi) kernel driver to inspect network packets. On first use, the app installs the WinpkFilter driver package and registers the NDISRD kernel driver service (demand-start only — it runs only while the app is active). The app may also spawn system utility subprocesses (PowerShell, reg.exe) to apply network and registry optimizations, and runs a local OAuth server during login. Optionally, it can register itself to start at login via the Windows Run registry key.

5.2 Split Tunneling & Packet Handling

The app uses split tunneling — it only routes game traffic through our relay servers. Supported games include Roblox (8 executables), Valorant (5 executables), and Fortnite (4 executables). All other traffic (browsing, downloads, other apps) goes through your normal internet connection untouched. The app:

• Intercepts outgoing network packets (UDP and optionally TCP) using the WPF driver
• Checks if the packet belongs to a supported game process (e.g., RobloxPlayerBeta.exe, VALORANT.exe)
• If yes, forwards it to the selected relay server over UDP port 51821
• If no, passes the packet through unmodified
• May also tunnel packets destined to known game server IP ranges

5.3 Network Changes

When you enable optimizations, the app may adjust the following system network settings. Network-level changes (Nagle, QoS, throttling, firewall) are cleaned up on uninstall:

• Nagle's algorithm (disabled via TcpAckFrequency and TCPNoDelay registry keys)
• Network throttling (disabled for lower latency)
• QoS and DSCP packet marking for game traffic priority
• Windows Firewall allow rules for Roblox executables
• DNS cache flush and Winsock catalog reset (as part of firewall fix)

5.4 System Optimizations

The app can optionally apply Windows performance tweaks for gaming, including:

• Timer resolution adjustment (higher precision scheduling)
• Power plan switching (high performance while gaming)
• MMCSS registry profile (prioritizes game audio/video threads)
• Process priority elevation and CPU affinity for the game
• Game Bar and fullscreen optimization settings

These use standard Windows APIs and registry keys. Timer resolution and process priority are reversed when the app is closed. Power plan, MMCSS, and Game Bar registry changes persist until manually reverted or the app's restore function is used. The NDISRD driver service installed by WinpkFilter also persists but only runs on demand.

5.5 Authentication & Stored Credentials

The app authenticates via OAuth through your browser. Tokens are stored locally in two places: an obfuscated file and the Windows Credential Manager (keyring). No passwords are stored by the app. Relay authentication uses short-lived Ed25519-signed tickets (valid for 5 minutes) issued by our API.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services that help us operate our Service (e.g., hosting, authentication)
• Legal Requirements: When required by law, subpoena, or other legal process
• Safety: To protect the rights, property, or safety of SwiftTunnel, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Cookies and Tracking

We use minimal cookies necessary for the Service to function:

• Authentication Cookies: To keep you logged in to your account
• Session Cookies: To maintain your session state

We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your personal data

To exercise these rights, please contact us at privacy@swifttunnel.net

9. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Connection configuration data is deleted immediately when configurations are removed or accounts are closed.

10. International Data Transfers

Our servers are located across 12 regions globally, including Singapore, India (Mumbai), Australia (Sydney), Japan (Tokyo), Germany, France (Paris), United Kingdom (London), Netherlands (Amsterdam), Brazil, and the United States. By using our Service, you consent to the transfer of your information to these locations. We ensure appropriate safeguards are in place to protect your data regardless of where it is processed.

11. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or sending an email to your registered address. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@swifttunnel.net
• Website: swifttunnel.net