1. Controller

The controller responsible for data processing on this portal is:
[[ Company name ]]
[[ Address ]]
[[ Email / phone ]]

2. Cookies we use

This portal uses only technically necessary cookies. We do not use tracking, advertising, or analytics cookies, and we do not profile users. The cookies set are:

• Authentication cookie — keeps you signed in. Persistent for up to 14 days if you choose "keep me signed in", otherwise removed when you close the browser.
• Session cookie — holds temporary session state during your visit.
• Anti-forgery cookie — protects forms against cross-site request forgery.

Because these cookies are strictly necessary to provide the service, they do not require prior consent. No consent banner with accept/reject is therefore shown.

3. Data we process

• Account data — your email address and profile details, used to provide access to the VPN management portal.
• IP addresses — recorded in login and audit logs for security purposes (detecting and investigating unauthorized access). Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: [[ e.g. 90 days ]].
• VPN and device data — device identifiers, assigned VPN addresses and connection times, used to operate and monitor the VPN service you use.

4. External resources

[[ If you still load Bootstrap / SignalR from a CDN (jsdelivr), disclose here that the user's IP is transmitted to the CDN provider when these are loaded. If you self-host them, state that no external resources are loaded and remove this note. ]]

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. To exercise these rights, contact us at [[ contact email ]]. You also have the right to lodge a complaint with a supervisory authority.

6. Changes

We may update this policy as the service evolves. Last updated: [[ date ]].