Privacy Statement

We believe in transparency. Here's exactly how TMFlix VPN handles your data and privacy.

Our Privacy Promise

TMFlix VPN is a community-built service for invited members. We prioritize your privacy and want you to understand exactly how our service works.

Encrypted Traffic

Military-grade encryption

Full Transparency

Clear about data flow

Community Owned

Run by friends, for friends

How Your Traffic Flows

When you connect to TMFlix VPN, here's what happens to your internet traffic:

1.

Your Device

Your traffic is encrypted using WireGuard protocol (military-grade encryption) before leaving your device.

2.

VPN Gateway

Your encrypted traffic passes through one of our VPN gateways (hosted on Hetzner Cloud servers in Germany, USA, or Finland).

3.

The Internet

Your traffic exits from the VPN gateway to reach websites and services. Websites see the VPN gateway's IP address, not yours.

DNS Filtering & Ad Blocking

We use AdGuard Home for DNS filtering to block ads and trackers. Here's what we log:

What We See:

  • • Domain names you visit (e.g., "google.com", "youtube.com")
  • • Timestamp of DNS queries
  • • Device identifier (which of your devices made the request)

What We DON'T See:

  • • Specific pages you visit (e.g., we see "youtube.com" but not "/watch?v=xyz")
  • • Content of your browsing (text, images, videos)
  • • Passwords or login information
  • • Search queries or personal data

Purpose: DNS logs help us block ads and malicious domains, and troubleshoot connection issues. We forward clean DNS requests to NextDNS for additional privacy protection.

Third-Party Service Providers

TMFlix VPN uses infrastructure from trusted providers. Your data passes through these services:

Hetzner Cloud

Our VPN gateways run on Hetzner servers in Germany, USA, and Finland. Your encrypted traffic passes through their network infrastructure.

View Hetzner's Privacy Policy →

Vercel

This web portal is hosted on Vercel. When you log in, your session data is processed by Vercel's infrastructure.

View Vercel's Privacy Policy →

Supabase (PostgreSQL)

User accounts and device information are stored in Supabase's PostgreSQL database.

View Supabase's Privacy Policy →

Google OAuth

We use Google for authentication. When you sign in, Google provides us with your name, email, and profile picture.

View Google's Privacy Policy →

What Information We Store

Account Information

  • • Your name (from Google)
  • • Your email address
  • • Your profile picture
  • • Device limit (usually 8)
  • • Account creation date

Device Information

  • • Device names you create
  • • VPN gateway selections
  • • WireGuard public keys
  • • Device creation dates
  • • Last connection timestamps

Data Retention & Deletion

We keep your data only as long as necessary:

  • •DNS logs: Automatically deleted after 7 days
  • •Device configs: Deleted immediately when you delete a device
  • •Account data: Kept while you're an active member (you can request deletion at any time)
  • •Audit logs: Kept for 90 days for security purposes

Your Rights

As a TMFlix VPN member, you have the right to:

✓Access your data at any time
✓Delete your devices
✓Request account deletion
✓Export your data
✓Opt out of DNS logging
✓Switch VPN gateways

Questions or Concerns?

If you have any questions about our privacy practices or want to exercise your rights, please contact the TMFlix admin team.

Last Updated: December 19, 2025

← Back to Home