Privacy policy

This policy explains what DinoLink stores about you, why, and what you can check yourself. We’ve tried to write it in language a regular person can read in five minutes, because most privacy policies are designed not to be read at all.

DinoLink is operated from the Republic of Seychelles. The company is not bound by mutual legal-assistance treaties with the Russian Federation, the People’s Republic of China, or the Five Eyes alliance.

What we don’t keep

DinoLink does not store, log, or retain the content of your traffic — the data inside the tunnel, such as the pages, messages and files you send or receive.

Our account and billing database does not store your IP address. IP addresses do appear in the logs described in the next section.

What we record, and why

To run the service, bill it and fix problems, the following records exist:

• VPN server logs: your IP address, your account, the destination domain and port of each connection (not the full URL or page path), and connection times, including when you connect and disconnect. DNS on our VPN servers records the domains looked up, without your IP address. These logs are kept locally on the servers.
• Website and API logs: when you visit our website or the app talks to our API, our entry servers record your IP address, the request path and the request headers. For requests that fail with an error, the request body is recorded as well.
• App DNS resolver: the encrypted DNS resolver the app uses by default (beacon.dog) records the domains looked up and a truncated IP address (the first two parts of an IPv4 address). These records are kept for 7 days.
• Usage records for billing: one record per account per hour of the traffic used, because the product is billed pay-as-you-go. The billing system is also set up to aggregate usage per account and service per day. We also keep each account’s data balance, total usage, the time usage was last reported, and the servers the account used in the current hour.

Third parties

• Error reports: the DinoLink apps send crash and error reports to Sentry (US region). These reports include your IP address and device information. Separately, our backend reports server errors (5xx responses) to Sentry.
• In-app support: the support chat inside the app runs on Chatwoot.

Account and billing data

To run a service that doesn’t fall over, we also keep:

• Account state: your email address, the identifiers of any Google or Apple account you have linked, authentication credentials, and the locale you prefer.
• Billing state: whether each payment succeeded or failed, the rail it came in on (USDT, SBP, Mir, card), and the amount. Crypto payments carry no card identity. Card payments carry only the last four digits of the card and the issuer.
• Wallet, data balance and data used: how much credit you have on your account, how many gigabytes are in your data balance, and how much traffic your account has used (the usage records described above). The balance remains available to you.
• Aggregate server health metrics: server load, capacity headroom, error rates. These are not joined to user identity.

We use these records to operate the service, bill usage and troubleshoot problems.

Your rights

You can ask us, at any time, to:

• Export the data we hold about your account
• Delete your account and the data associated with it
• Correct any data that’s wrong
• Withdraw consent (and stop using the service)

Send requests from the email on file to the support address at the bottom of this policy. We respond within seven days.

If we can’t confirm that a deletion request comes from the account owner, we’ll ask you to sign in to the DinoLink client app and confirm the request from there.

Cookies and analytics on the website

The DinoLink marketing website (dinolink.io) uses no third-party analytics, no advertising cookies, and no behavioural fingerprinting. We host the static assets ourselves.

We do use one technical cookie to remember your language preference between visits. You can clear it at any time and nothing else breaks.

Besides DinoLink’s own servers, the DinoLink client apps (Android, iOS, Windows) send error reports to Sentry and run in-app support on Chatwoot, as described under “Third parties” above.

What you can check yourself

Run a packet capture on your own device or router while connected through DinoLink. You’ll see that traffic between your device and the DinoLink endpoint is encrypted. A local capture can’t show what happens on our servers, so it can’t show what our servers record — that is what this policy describes.

Children

DinoLink is not intended for use by anyone under the age of 16. We do not knowingly collect data from children. If you believe a minor has registered an account, contact us and we’ll close it.

Changes to this policy

Material changes to this policy will be announced at least 30 days before they take effect, via email to the address on file and a notice on the website. The “last updated” date at the top of this page always reflects the current version.

Substantive changes (those that would weaken your privacy or expand what we collect) require your active consent before they apply to you. The previous version of this policy continues to govern your data until you accept the new one.

Governing law and jurisdiction

This policy is governed by the laws of the Republic of Seychelles. Any dispute that can’t be resolved by correspondence will be heard in the courts of the Republic of Seychelles. This does not affect statutory rights you may have under the law of the country in which you reside.

Contact

For privacy questions, data requests, or to report a concern:

[email protected]

For other questions about the service, see our terms of service or write to [email protected].