Colitu VPN browser extension - privacy policy

What the extension stores in your browser: your sign-in session (access and refresh token), the e-mail address of the account, the id of this browser as a device on your account, a random device key, the server list, the current proxy ticket, measured pings and your settings. Nothing is synchronised to other browsers. Signing out deletes the session, ticket and server list and removes this browser from your account's devices.

What is sent to Colitu (api.colitu.com, over HTTPS): your e-mail and password when you sign in (or the device code you confirm on colitu.com); a device name such as "Firefox · Windows", the platform, the extension version and the operating system name when the device is registered.

Browsing traffic: while connected, the browser's traffic goes through the Colitu server you chose (an HTTPS proxy). HTTPS sites stay encrypted end to end; the server sees which host names you connect to, as any VPN or proxy does. The servers keep no activity logs. Only the traffic volume per device is counted, for the plan's traffic limit.

The extension has no analytics, crash reporting, advertising or third-party code, does not read or change page content, keeps no browsing history and runs no remote code.

Full policy of the Colitu service: https://colitu.com/legal/privacy
Extension details: https://github.com/colitu/colitu-extension/blob/main/PRIVACY.md
Contact: privacy@colitu.com