Privacy Policy

Version 2026-10-12a
This document has not been reviewed by an attorney.

This notice explains what we collect, why, how long we keep it, and who can see it. It applies to all TunnelNet services, including TunnelNet Halo, TunnelNet VPN and the IPv4 address leasing service, operated by MinakiLabs LLC.

What we collect about you

What we collect about traffic to your address

This is the part we want to be clearest about.

We record metadata about connections made to your leased address. That includes the source IP address of whoever connected, the destination port, byte and packet counts, and timestamps.

This means we hold records about third parties who connect to your machine. Those people are not our customers and have not agreed to anything with us. We collect this to operate the network, detect abuse, and show you what is reaching your address.

We do not record the contents of any traffic. No payloads, no messages, no files, no page contents. Only metadata about the connection itself.

Retention

Who has access

The operator. We do not sell your data, and we do not share it with third parties for advertising or any similar purpose.

We use Stripe for payment processing, a text-message provider for the texts you agree to, the cloud hosting companies whose servers run our systems and your Halo server, and Keycloak (our own sign-in software) for sign-in. They handle your data only to provide their service to us, under their own terms.

We may disclose information if required by a valid legal process, or where necessary to investigate abuse or protect the operation of the network.

For Halo: because we run your Halo server, a valid legal request can reach the reports on it, for as long as they exist (30 days). We give only what is asked for.

If we receive an abuse report or a valid legal request, we may disclose your account email and connection metadata. We will notify you unless prohibited by law.

TunnelNet Halo

Where your analytics are computed. Halo works out its statistics (which companies your devices talk to, busy hours) on the server dedicated to you, not on our central systems. Your reports are built and kept on your Halo server. Our central systems pass them to your dashboard when you open it, use them to send you malware alerts, and keep none of them. Your analyst runs on your Halo server and sends nothing to any outside AI service.

Retention for Halo.

Card payments. Halo is paid by card through Stripe. We never see or store your card number.

Data brokers. Halo blocks trackers from collecting more about you. It cannot erase what data brokers already hold; you need to ask them to delete it.

Text messages (SMS)

Giving us a mobile number is optional. We store one only if you enter it and tick the box agreeing to receive texts; if you enter a number without ticking that box, we do not keep it. We record the date and time you agreed and the exact wording you agreed to.

We do not share mobile phone numbers with third parties or affiliates for marketing purposes. A mobile number you give us is used only to send you messages about your own account, and is passed to our messaging provider solely to deliver those messages.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

If you opt in, we may send you account, service, and security messages — for example that a payment failed, that your address is being released, or that we detected something wrong with your tunnel. We do not send marketing or promotional texts.

Message frequency varies. These messages are triggered by events on your account rather than sent on a schedule, so there is no fixed number per month. Message and data rates may apply.

Reply STOP to any message to stop receiving them; reply HELP for help, or email support@minakilabs.com. Opting out of texts does not affect your service, and we will still reach you by email. You can also ask us to delete a stored number at any time by emailing support.

The box you tick when you sign up says, in full:

I agree to receive account, service, and security text message alerts from MinakiLabs LLC (TunnelNet), at the number provided. Message frequency varies. Message and data rates may apply. Reply STOP to cancel, HELP for help.

That wording is reproduced here from the same source the sign-up page renders it from, so the two cannot differ. The box is not ticked for you.

Security

Data is stored on infrastructure we control, with access restricted to the operator. We take reasonable measures to protect it. We cannot guarantee absolute security, and no service can.

Your choices

You can request a copy of the data we hold about you, or ask us to delete it, by emailing support@minakilabs.com. Some records must be retained for legal, tax, or abuse-response reasons even after you cancel; we will tell you which.

On account deletion, we remove your data within 30 days, except where retention is required by law or necessary to resolve abuse cases.

Cancelling your service releases your address and stops further collection of traffic metadata for it.

Changes

We may update this notice. The version date at the top will change, and we will notify active customers of material changes by email.

Contact

support@minakilabs.com