Privacy & cookies

Updated 5 October 2026. This notice covers the hosted noobtunnel service at tunnel.byenoob.com, managed by the noobtunnel project. Contact admin@byenoob.com for privacy questions or requests. Independently operated installations have their own operators and policies.

Account and service information

The service stores information needed to manage your account and network, including your username, email address where provided, a password hash, account permissions, enrolled device names and public keys, assigned addresses, domains and published resource settings. Enrollment and API tokens are used to authorize connections and actions. Never share these credentials publicly.

Connection and security records

The service processes connection metadata to route traffic, display network status, measure usage, enforce allowances and investigate abuse. Records can include IP addresses, request times, hosts, request paths, response codes, traffic totals, device handshakes and account events. Request URLs can contain personal information; avoid placing secrets in URLs. Location and reputation checks may use configured third-party IP intelligence providers.

WireGuard encrypts mesh traffic between its tunnel endpoints. Publishing a service through a POP has a different trust boundary: HTTP and HTTPS requests are proxied, and HTTPS may terminate at the POP before traffic continues to your backend. Do not treat a publicly published resource as private mesh traffic. The service is not advertised as a no-logs anonymity service.

Essential cookies and browser storage

A session cookie keeps you signed in. The application also uses browser storage for interface preferences. These support authentication and normal operation. Clearing cookies signs you out; clearing local storage resets saved preferences.

Recipients, retention and requests

Hosting infrastructure, email delivery and configured security providers process information needed to run the service. Providers may process data in countries other than your own.

Account configuration is kept while needed to provide the service. Operational records and backups may persist separately for security, troubleshooting and recovery. For the retention applicable to your data, or to request access, correction or deletion, contact the operator. Some records may need to be retained for legal obligations or abuse prevention. Depending on your location, you may also have rights to restrict or object to processing and complain to a data protection authority.

Other websites

A service published by another user is operated by that user and may collect its own data. Follow that site's privacy notice. Externally linked services have separate privacy policies.