NinjaSurfer

Privacy policy

Last updated: 10 October 2026

What we store

• Account: your email address and name, and a password hash if you sign in with a password. If you sign in with Google or GitHub we receive your verified email address, your name and the provider's account id, nothing else; we never receive your Google or GitHub password.
• Workspace data: profiles, proxies, VPN entries, notes and browser data (cookies, site storage). The NinjaSurfer app encrypts all of it on your computer with your workspace key before upload; the server stores only ciphertext and never receives the key.
• Technical records: sign-in sessions (device name, last activity), which computer currently runs a profile, and server logs (IP address, time, request) kept for security and troubleshooting.

How we use it

Only to provide the service: signing you in, syncing your encrypted data between your computers and preventing one profile from running on two computers at once. We do not sell data, show ads or share data with third parties, except hosting providers that store the encrypted data and where the law requires it.

Google and GitHub sign-in

Data received from Google APIs is used only to identify your account (email, name, account id) and is handled under the Google API Services User Data Policy, including its Limited Use requirements.

Your choices

You can sign out of any session in the app, delete profiles at any time (their data is removed from the server), and ask us to delete your account and all its data by writing to the contact address below.

Contact

sintanial@gmail.com