Privacy Policy

What we collect, why we collect it, and the choices you have.

Last updated: July 23, 2026

This Privacy Policy explains how localtunnel.in ("localtunnel.in", "we", "us") collects, uses, and protects information when you visit our website, join our waitlist, or use our tunneling service (together, the "Service"). By using the Service you agree to this policy.

1. Information we collect

Information you give us

Waitlist & account details: your email address when you request an invite; your name and email when you create an account with an invite code.
Billing details: when paid plans launch, payment is handled by a PCI-compliant payment processor. We store only the billing metadata we need (plan, invoice history) — never your full card number.
Communications: messages you send to our support, sales, or security addresses.

Information collected automatically

Service telemetry: tunnel session metadata such as connection time, assigned subdomain, client version, bytes transferred, request counts, and the IP addresses of tunnel clients and visitors. We use this to operate the Service, enforce rate limits, and fight abuse.
Website analytics: standard server logs (IP address, user agent, pages visited). We use privacy-respecting, aggregate analytics; we do not sell this data or use third-party advertising trackers.

Tunnel traffic content

We treat the traffic flowing through your tunnels as yours. We proxy it to deliver the Service and do not read, store, or mine the content of tunneled requests and responses, except: (a) transiently in memory as required to route traffic; (b) metadata for rate limiting and billing; and (c) where strictly necessary to investigate abuse, security incidents, or legal requests. The local request inspector runs on your machine — its captured traffic never leaves your computer.

2. How we use information

To provide, maintain, and improve the Service.
To send invite codes, service announcements, and (only with your consent) product updates.
To secure the platform: detecting abuse, phishing, malware distribution, and other violations of our Terms of Service.
To comply with legal obligations.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

3. Sharing

We share data only with:

Infrastructure providers (cloud hosting, email delivery, payment processing) who process it on our behalf under contractual confidentiality obligations.
Law enforcement or regulators when required by valid legal process. Where lawful, we will notify affected users before disclosure.
A successor entity in the event of a merger or acquisition, in which case this policy continues to apply to previously collected data.

4. Data retention

Waitlist emails: kept until you receive an invite or ask us to remove you.
Account data: kept while your account is active and deleted within 30 days of account deletion, except where retention is legally required.
Tunnel session metadata and logs: retained for up to 90 days for security and abuse prevention, then deleted or anonymized.

5. Security

All connections to and through the Service are encrypted with TLS. Access to production systems is limited to authorized personnel, protected by multi-factor authentication, and logged. No method of transmission or storage is 100% secure, but we work continuously to protect your data, and we will notify affected users of any breach as required by applicable law.

6. Your rights

Depending on where you live (including under India's DPDP Act and the EU's GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email [email protected]. We respond within 30 days.

7. Cookies

The marketing site uses only essential cookies (if any). The application dashboard uses cookies strictly for authentication and session management — no cross-site advertising cookies.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or an in-product notice at least 14 days before they take effect. The "Last updated" date above always reflects the current version.

10. Contact

Privacy questions or requests: [email protected]
Security reports: [email protected]