What we collect, why, and what we deliberately choose not to collect at all.
Anchored Privacy ("we," "us," "our") builds VPN and Private DNS tools for people who want a steadier, more private connection to the internet. This policy explains what information we collect, why, and what we deliberately choose not to collect at all. It is written to comply with the Protection of Personal Information Act 4 of 2013 ("POPIA") and, where relevant to non-South African users, the GDPR. If anything here is unclear, contact us and we'll explain it properly.
To create and run your account, we collect:
Is this information mandatory? Your email address is mandatory — without it, we cannot create an account, deliver your configuration file, or process billing, so we're unable to provide the Service without it. Your WhatsApp number is entirely optional and only used if you actively choose to provide it.
Our no-logs commitment means we do not record:
We collect the minimum technical information required to operate the network reliably (such as aggregate server load). This data is anonymised, cannot be tied back to individual users or their activity, and is retained for no longer than 30 days before being discarded.
We use the information above only to:
We do not use your information for any purpose beyond those listed above without asking you first. We do not sell, rent, or share your personal information with advertisers or data brokers, under any circumstances.
Direct marketing: We do not currently send marketing communications. If this changes in future, we will only do so with your explicit opt-in consent, and every marketing communication will include an easy opt-out (in line with POPIA section 69).
Your configuration file is generated specifically for your account and sent to you by email by default, as this is the most secure delivery method available to us. If you request delivery via WhatsApp instead, please note that message passes through WhatsApp's own infrastructure (operated by Meta) before it reaches you — we recommend email for this reason. Your configuration file should be treated like a password: don't share it, and contact support immediately if you believe it's been compromised.
We rely on a small number of trusted providers to operate the service:
Each of these providers is contractually bound under written agreements to process your information only on our instructions, and to apply security safeguards equivalent to those required of us under POPIA section 21.
We retain your information only for as long as necessary:
You can request deletion of your account and associated data at any time — see Section 9 (Your Rights).
Your VPN connection and Private DNS traffic are protected using WireGuard, a modern encryption protocol, and we apply reasonable technical and organisational safeguards to protect the account information we do hold. No system is perfectly secure, and we commit to notifying affected users and the Information Regulator promptly in the event of a data breach involving personal information, in line with POPIA section 22.
We do not make any decisions about you based solely on automated processing that would significantly affect you.
Depending on where you live, you have the right to:
We aim to respond to any request within 30 days, in line with the framework set out under the Promotion of Access to Information Act (PAIA). If you're located elsewhere, we also aim to respect equivalent rights such as those under the GDPR.
To exercise any of these rights, contact our Information Officer (Section 12).
If you are unhappy with how we've handled your information, you also have the right to lodge a complaint with South Africa's Information Regulator:
Our service is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18.
Our infrastructure and hosting (Webway and HostAfrica) are based entirely in South Africa, and your personal information is not transferred outside the country as part of the core Service. The one exception is optional: if you choose to receive your configuration file or support responses via WhatsApp instead of email, that communication passes through WhatsApp's infrastructure (operated by Meta), which may process data outside South Africa. This only applies if you actively opt in to WhatsApp — it is never the default. Where any such transfer does occur, it is made on the basis of your consent, consistent with POPIA section 72.
In accordance with POPIA sections 55–56, our Information Officer is:
Name: Tyreese Manuel
Email: legal@anchoredprivacy.co.za
The Information Officer is responsible for ensuring our compliance with POPIA and for handling requests relating to your personal information.
We may update this policy from time to time. If we make material changes, we'll notify active subscribers by email before the changes take effect.
General questions about this policy can be sent to support@anchoredprivacy.co.za or via our Support page. For requests relating specifically to your personal information or POPIA rights, contact our Information Officer directly (Section 12).
See also our Cookie Policy and PAIA Manual.