Grip VPN

Svenska · English

Tämä asiakirja on saatavilla ruotsiksi ja englanniksi, jotka ovat oikeudellisesti sitovat versiot. Alla näkyy englanninkielinen versio.

Grip VPN Privacy Policy

Last updated: 28 October 2026 Version 1.0. The Swedish version (Integritetspolicy) prevails in case of discrepancy.

This policy explains what personal data we process when you use Grip VPN: the website and account portal (gripvpn.com / panel.gripvpn.com), our macOS and Android apps, and the VPN service itself. It also covers why we process the data, how long we keep it and what your rights are.

The service is designed to collect as little as possible. Below we describe both what we do not log and what we actually store, as the system is built today.

1. Data controller

Netec Sverige AB Company registration number: 559358-1217 Address: Vildgåsvägen 25, SE-227 35 Lund, Sweden Email: info@netec.se Phone: +46 46-590 07 65

Netec Sverige AB provides Grip VPN and is the controller for the processing described here. We have not appointed a Data Protection Officer. Send questions about privacy and data protection to info@netec.se.

2. What we do NOT log

While you are connected to the VPN we do not store:

  • the websites, apps or services you use, or the content of your traffic
  • your DNS queries (the DNS resolver on our VPN servers is configured not to log queries or replies)
  • the IP address you connect from
  • when you connect or disconnect, or for how long
  • how much data you transfer over time

Our web servers do not write access logs containing visitor IP addresses to disk, neither in the web server nor in the application.

How it works technically. During an active connection, the VPN server's WireGuard module keeps in memory, for technical reasons, the IP address and port your device is currently connecting from, the time of the latest handshake and counters of bytes transferred. Without this the server cannot send traffic back to you. This data is never written to disk and disappears when the server restarts or your device is removed. Our account portal may read the latest handshake and byte counters to show "Connected now" or "Last connected" in your account. It holds them in memory only and does not store them. Your source IP is never sent from the VPN server to the portal.

We therefore cannot link particular traffic or a particular point in time to an account afterwards, and we cannot hand such data over, because we do not have it.

3. What we store

3.1 Account

  • Email address: your username and the address for receipts and account emails.
  • Password: stored only as a one-way hash (Argon2id). We can never see your password.
  • Two-factor authentication (optional): if you enable it, we store the TOTP secret needed to verify your codes. The secret is stored encrypted.
  • Language preference, account role and status (e.g. whether the account is suspended and why), when the account was created and the date you last signed in (the date only, so that unused accounts can be deleted, see section 5).

3.2 Subscription and purchases

  • Your plan, when your subscription expires and whether it is active or expired.
  • Orders: product, amount, any discount code and discount amount, currency, status (paid, refunded, etc.), timestamps and references to the payment at Stripe.
  • We never see or store your card or bank details. Payment takes place on Stripe's payment page (see section 6).
  • Shipping details, only for hardware purchases (e.g. a VPN router): name, address, postal code, city, country, phone number and tracking number, so that we can ship the product and handle returns and warranty claims.

3.3 Devices and VPN configuration

  • Device name: the name you choose. The apps suggest your device's name automatically (on a Mac the computer name, e.g. "Anna's MacBook Air", on Android the device name or make and model). It may therefore contain your first name. You can change or remove it in your account.
  • Public WireGuard key: the private key is generated on your device and never leaves it. We never have it.
  • Internal tunnel address (e.g. 10.66.x.x) your device is assigned inside the VPN. This is not your real IP address.
  • Platform (e.g. macos, android), whether the device was created via the web or an app, whether it is enabled and when it was created.

3.4 App sign-ins

  • For each signed-in app we store a session: only SHA-256 hashes of the sign-in tokens (not the tokens themselves), their expiry, the device name and platform, and when the sign-in happened. We store no "last used" time and no IP address.
  • Code sign-in (TV): a short-lived code (valid for 10 minutes), its status, device name and platform, and the time of the last check.
  • Password reset: a hash of the reset link and when it expires or was used.

3.5 Event log (administrative)

For support, troubleshooting, bookkeeping and abuse prevention we keep an event log of administrative account events, for example account creation, purchases and refunds, subscription changes, devices added or removed, apps signed in or out, password changes, 2FA enabled or disabled, and suspensions. Each entry contains a timestamp, who performed the action (usually your email address) and what happened. The event log never contains IP addresses, traffic or connection data. Note that the time an app signs in is therefore stored. The time the VPN tunnel connects or disconnects is not. The event log is deleted automatically after 90 days, except payment and refund events, which are bookkeeping records (see section 5).

3.6 Emails we send

We send emails to confirm purchases (with instructions for getting started), for password resets and for other account-related messages. We send no newsletters or marketing. Emails are sent via SMTP2GO (see section 6). We keep no copies of sent emails on our servers, and the recipient address is not written to the system log. If sending fails, the message is stored temporarily on the server for at most 30 days.

3.7 Transient data (not stored)

  • IP address on web visits and app requests: used in memory to limit sign-in attempts (at most 15 minutes) and to show "your IP address / protected or not" on the website and in the apps. On a first visit without a chosen language we also look up which country the IP address belongs to in a local database on our own server (DB-IP), only to suggest a language. No third party is contacted. Neither the IP address nor the country is stored.
  • Customer support: if you contact us by email or phone we process what you send in order to help you.

3.8 Data stored by the apps on your device

  • macOS: sign-in tokens, your private WireGuard key and device details are stored in the macOS keychain and can only be used on this device. The selected server and the portal address are saved in the app's preferences. The VPN service writes errors only to a local log (/Library/Logs/GripVPN/helper.log). It never logs traffic, IP addresses or keys.
  • Android: the same data is stored encrypted with an Android Keystore key, in the app's private storage. Preferences are stored locally.
  • When you sign out in the app, the device is removed from your account and the local data is deleted.
  • The apps contain no ads, no advertising ID, no analytics or tracking software, and no third-party crash reporting service.
Purpose Data Legal basis (GDPR)
Create and manage your account and sign you in Email, password hash, optional TOTP, sessions, sign-in codes Contract (Art. 6(1)(b))
Provide the VPN service (devices, keys, tunnel addresses, access while subscribed) Device data, subscription status Contract (Art. 6(1)(b))
Take payment, refund and send receipts Orders, payment references, email Contract (Art. 6(1)(b))
Bookkeeping Order data and accounting records Legal obligation (Art. 6(1)(c)), Swedish Bookkeeping Act
Ship hardware and handle returns and warranty claims Shipping details Contract (Art. 6(1)(b)), then legal obligation / legitimate interest for warranty claims
Security, abuse and fraud prevention (sign-in rate limiting, suspensions, event log) IP address transiently in memory, event log Legitimate interest (Art. 6(1)(f)): protecting the service and our customers
Customer support What you send us and relevant account data Contract / legitimate interest
Establishing, exercising or defending legal claims Relevant order and event data Legitimate interest (Art. 6(1)(f))

You are not obliged to provide personal data, but without an email address and password we cannot create an account, and without a shipping address we cannot ship hardware.

5. Retention

Data Retention
Account (email, password hash, TOTP, language, last sign-in date) As long as the account exists. You can delete the account yourself at any time (see section 10). Accounts with no active subscription where nobody has signed in for 24 months are deleted automatically. We notify you by email 30 days before.
Devices and public keys Until you remove the device or sign out of the app, and at the latest when the account is deleted
App sessions, TV sign-in codes and password reset links Until you sign out or they expire (sign-in tokens expire after at most 90 days without use). Expired entries are deleted automatically within a day.
Orders and payment references 7 years after the end of the calendar year in which the financial year ended (Swedish Bookkeeping Act). If you delete your account, paid orders are detached from you: they are kept under a random code, without email, name, address or phone number.
Shipping details (hardware) 3 years after delivery (the consumer complaint period under the Swedish Consumer Sales Act), then deleted
Event log Sign-in, security and other events are kept for 90 days and then deleted automatically. Payment and refund events are kept as long as the orders (Swedish Bookkeeping Act, see above).
IP address for sign-in rate limiting Memory only, at most 15 minutes
VPN server connection state (your current source IP, latest handshake, byte counters) Memory only while the connection or device exists. Never on disk
Server system logs (error and operational messages) At most 7 days
Backups of the database and server configuration A backup is taken every night and kept locally on the server for 14 days (accessible to root only), then deleted automatically. If we introduce off-site backup storage, we will state the retention period, provider and location here before it takes effect.

Data deleted from the database may remain in backups until they are overwritten according to the table above.

6. Recipients and processors

We never sell your personal data or share it for marketing. Data is only disclosed to:

  • Stripe (Stripe Payments Europe Ltd, Ireland), which handles payments. Stripe receives your email address, order number and amount from us, plus the shipping address for hardware purchases. You give card and other payment details directly to Stripe. Stripe also processes data such as device information and your IP address for fraud prevention, acting as an independent controller under its own privacy policy (stripe.com/privacy). You can pay by card, Apple Pay, Google Pay or Swish. If you pay with Apple Pay or Google Pay, Apple or Google respectively also processes payment data as an independent controller under its own terms. If you pay with Swish, Getswish AB and your bank also process payment data, such as your mobile number, as independent controllers under their own terms.
  • Hosting and server operations: we do not use a hosting provider to run the servers. Netec runs its own servers as virtual machines on its own virtualisation platform. The account portal and database (and the Netherlands VPN location) run on a server in the Netherlands, with the IP address 190.2.141.44 from the network provider WorldStream. The VPN server for Sweden is located in Malmö and connected to the internet via Telia. The network providers carry the traffic but have no access to our servers or database.
  • Off-site backup storage: not used today. If we introduce it, we will update this policy with the provider and location.
  • SMTP2GO (Sand Dune Mail Ltd, Christchurch, New Zealand) sends the service's emails on our behalf, e.g. order confirmations and password reset links. SMTP2GO receives the recipient's email address and the message content and is our processor under SMTP2GO's data processing agreement. SMTP2GO has data centres in the EU (Amsterdam), the USA and Australia. According to SMTP2GO, personal data of customers in the EEA is stored only within the EEA, and accounts registered from the EU are assigned to the Amsterdam data centre. With SMTP2GO's default settings, delivery data and email headers (e.g. sender, recipient, subject and delivery status) are kept for 35 days and then deleted. The content of messages is not stored, with one exception: to counter spam and abuse, SMTP2GO keeps about one in every thousand messages sent for 35 days.
  • Cloudflare (DNS): used only for name resolution for our domains. Traffic to the website, the account portal and the VPN does not pass through Cloudflare.
  • PostNord, for hardware purchases: name, address and phone number for delivery.
  • Authorities: where required by law, e.g. the Swedish Tax Agency, or under a lawful decision or order. Because we do not store traffic, source IP addresses or connection times, we cannot disclose such data.
  • Auditors and advisers, to the extent needed for bookkeeping and audits.

The apps are downloaded via Google Play or as a file directly from us. Google (and later Apple) process data about downloads and purchases in their stores as independent controllers under their own terms.

7. Transfers outside the EU/EEA

We aim to process data within the EU/EEA. Some providers, such as Stripe, may transfer data to countries outside the EU/EEA, including the United States. Such transfers rely on an EU Commission adequacy decision (e.g. the EU–US Data Privacy Framework for certified companies) or the EU Commission's Standard Contractual Clauses, with supplementary measures where needed. Our VPN servers are in Sweden and the Netherlands. Emails are sent via SMTP2GO, a New Zealand company. The EU Commission has decided that New Zealand provides an adequate level of protection. SMTP2GO states that personal data of customers in the EEA is stored within the EEA. If SMTP2GO or its sub-processors process data in a country without an adequate level of protection, such as the United States, this is done under SMTP2GO's data processing agreement on the basis of the EU Commission's Standard Contractual Clauses. The account portal, database and backups are located in the EU/EEA (the Netherlands and Sweden).

8. Security

  • All communication with the portal and apps uses HTTPS (TLS) with HSTS. VPN traffic is encrypted with WireGuard.
  • Passwords are hashed with Argon2id. Sign-in tokens and password reset links are stored only as hashes.
  • The WireGuard key is generated on your device, and the private key never leaves it.
  • Two-factor authentication (TOTP) is available for your account.
  • The servers are hardened (firewall, restricted SSH access, automatic security updates), and backups are accessible to root only.

9. Cookies

The website uses only strictly necessary cookies:

  • grip_session keeps you signed in and protects forms against forged requests (CSRF). It also stores temporary messages. The cookie is signed, marked HttpOnly and Secure, lasts at most 14 days and is removed when you sign out.
  • grip_lang is set only when you choose a language in the language switcher yourself, and contains nothing but the language code (e.g. en). It is marked HttpOnly and Secure and lasts 12 months.

Because they are needed for the service to work and to remember a choice you made yourself, no consent is required under the Swedish Electronic Communications Act.

We use no cookies or similar technologies for analytics, statistics, advertising or tracking, and the website loads no third-party scripts, fonts or similar resources. Stripe's cookies and terms apply on Stripe's payment page.

10. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you
  • rectify inaccurate data. You can change your email, password and device names yourself in your account.
  • erasure ("right to be forgotten"). Data we must keep by law, such as accounting records, is deleted when the retention period ends.
  • restrict processing in certain cases
  • object to processing based on legitimate interest
  • data portability: receive your data in a structured, machine-readable format

You can remove devices and sign out apps yourself in your account. You can delete your whole account yourself under My account → Security & 2FA → Delete account (panel.gripvpn.com/konto/radera) or in the app. Deletion takes effect immediately. How it works and what is kept: panel.gripvpn.com/delete-account. To exercise your other rights, or if you cannot sign in, email info@netec.se from the address linked to your account. We reply within one month.

Complaints

If you think we are processing your data incorrectly, please contact us first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, SE-104 20 Stockholm, Sweden, www.imy.se, imy@imy.se, or with the supervisory authority in your country of residence.

11. Children

Grip VPN is not directed at children. You must be at least 13 years old to buy a subscription. If you are under 18, you need the consent of your parent or guardian to make a purchase. We do not knowingly collect data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

The Swedish Electronic Communications Act (2022:482, "LEK") contains rules on notification to the Swedish Post and Telecom Authority (PTS) and on retention of traffic data for law enforcement purposes. The obligation to retain traffic data (chapter 9, section 19 LEK) applies to those who carry on a notifiable activity under chapter 2, section 1 LEK, and covers data relating to telephony, messaging via a mobile network access point and internet access. Grip VPN is used on top of the internet connection you already have from your operator. We do not provide the internet connection itself. Our assessment is that Grip VPN is currently not covered by the retention obligation.

We do not store traffic data (see section 2). If we were to become legally obliged to retain such data, for example after a change in the law or a decision by PTS, we will say so here.

13. Changes to this policy

We may update this policy, for example when the service changes or laws change. The latest version is always available at panel.gripvpn.com/privacy-policy (English) and panel.gripvpn.com/integritet (Swedish), with the date of the last change. If the changes are material, we will notify you by email or in the apps before they take effect.

14. Contact

Netec Sverige AB (Grip VPN) Vildgåsvägen 25, SE-227 35 Lund, Sweden Email: info@netec.se Phone: +46 46-590 07 65