Northgate Connect

Privacy Policy

Version: 2026-10-25-v9

What we store

The email address you sign up with, your plan (or free trial) and its dates, the VPN username you choose, and a record that you accepted the Terms and Privacy Policy (your email address, the date, the Terms version and, for a plan purchase, whether you ticked the box requesting immediate access and accepting the loss of the 14-day withdrawal right). If a PayPal dispute is opened for your payment we store its PayPal reference and outcome. We do not store your VPN password (only a salted hash is kept on the VPN server). We do not store your name, address or card details. PayPal holds your payment details.

What the VPN server records

We do not record the websites you visit, your DNS lookups, or the contents of your traffic. The VPN server does record connection details every time you connect: your VPN username, the IP address you connected from, the internal VPN address assigned to you, and the time. This is used for security, abuse prevention and troubleshooting. It is written to the server's system journal and kept for up to 30 days (or until the journal reaches its 1 GB size limit, whichever comes first), then deleted automatically. The server's firewall also logs blocked inbound connection attempts to the server (source IP and port, rate-limited) in the same system journal, under the same 30-day limit. We do not claim that we keep no logs: these connection records exist, and for up to 30 days they could be read by us and could be handed over if valid legal process under US law requires it. They do not show what you did while connected.

While you are connected, your DNS lookups are answered by public resolvers (currently Cloudflare 1.1.1.1 and Google 8.8.8.8), which see them coming from our server's address and handle them under their own policies.

Free trial: how we enforce one trial per person

The free trial is limited to one per email address and one per network (IP) address. To enforce that, when you ask for a trial we keep: (a) a salted, one-way hash of your email address (lower case, without any "+tag", and without dots for Gmail) for 12 months, even if you delete your account, so that a deleted account cannot simply start another trial; and (b) a salted, one-way hash of your network (IP) address (for IPv6 only its first half, the /64 prefix) and the number of your network operator (ASN), which we delete after 30 days. We cannot turn these hashes back into your email or IP address, but we can check whether an address we are shown matches one we hashed. The readable email address is stored only in your account (and, until you click the link or it expires, in the pending sign-up, which is deleted when it is used and in any case within a day after it expires). We use a short-lived count of sign-up requests per network address and per email address to stop abuse. This is announced on the sign-up page before you submit the form.

Coupons and referrals

If you use a coupon, we keep a salted, one-way hash of your email address with the code for 12 months (even if you delete your account) so that each account uses a coupon once. Every account has a private referral link. If a friend registers a trial through your link, we store on your account the date they used the link, the date they signed up, their status, and a masked form of their email address (for example s***@gmail.com) so you can see it on your account page; we also keep a salted hash of their email address (to give one credit per friend) and, for 30 days, a hash of their network address (to stop people referring themselves). The link is carried in a cookie in your friend's browser for up to 30 days. Referral credit has two levels: your direct referrals, and the people they refer in turn. For the second level we use the same records (the masked email address, dates and status of those people, and whether they have made a first payment) to show them in your "Your network" view and to count the credit you earn, together with a counter of payments counted towards your next free month. We do not show anyone's full email address to another customer, and we do not pass this information to anyone for marketing. Your account page shows these records only to you, and the records of people you referred are deleted when you delete your account. If you delete your account, referral credit you have not used is lost, and people below you are no longer connected to you.

Sign-in and email records. When a password sign-in fails we keep, for up to 24 hours, a one-way hash of the username and of your network address, only to limit guessing; they are deleted after that. Sign-in and sign-up links expire after 15 and 30 minutes; a sign-in session lasts up to 14 days. For each email we send we keep the recipient address, subject and status for 7 days (the text is removed once it is sent).

What we do not do

We do not run analytics or advertising scripts on this site. We do not store your readable IP address in this site's database; the only IP-derived data stored is the 30-day hash and network-operator number described above. Our hosting provider (Cloudflare) may process IP addresses to deliver the site and to limit abuse, and keeps its own logs.

Service providers

We use three outside providers. Each handles what it receives under its own terms and privacy policy.

Your DNS lookups while you are connected to the VPN are answered by the public resolvers named above. We do not sell your information and we do not share it for advertising. We may disclose information we hold if valid legal process under US law requires it, to protect our rights or the service, or to respond to a payment dispute. We can only give what we hold, as described on this page.

Retention and deletion

You can delete your account and stored email at any time on your account page. A free trial that ends is treated like an ended plan: the VPN login is switched off, kept for 30 days, then deleted, and the other account data is deleted about 90 days after that. Ended accounts are locked for 30 days, then the VPN account is deleted, and your other stored data is deleted about 90 days after the lock. The acceptance record (email address, date, Terms version and your choice on the withdrawal-right box) is kept longer, as proof of what you agreed to: for 3 years after you accepted, and at least 1 year after your account was removed, and then deleted. It is kept even if you delete your account. While a payment dispute is open we keep the account record until it is resolved.

Your privacy rights

How to ask. You can ask us for a copy of the personal data we hold about you (access), to correct it, or to delete it. Email support@northgateconnect.us from your account email address (we may ask you to confirm it is you), or delete your account yourself on your account page. We answer within 30 days. Where the law of your place gives you more rights (for example to object to or restrict processing, to receive your data in a portable format, or to withdraw consent), you can use them the same way. If you are in the European Economic Area, the United Kingdom or Switzerland you can also complain to your data-protection authority; if you are a California resident you have the rights to know, correct and delete, and we do not discriminate against you for using them. We keep what the law requires or allows us to keep (for example the acceptance record described above), and PayPal keeps its own payment records.

Why we use your data (legal basis). To provide the service you ask for and to take payment through PayPal (performance of our contract with you); to keep the service secure, prevent abuse and fraud, enforce the one-trial rule and keep proof of what you accepted (our legitimate interests); and to follow the law and respond to valid legal process (legal obligation). We do not use your data for advertising and we do not sell it.

Where it is processed. Our VPN server, our website and its database, and the providers named above are operated in the United States. If you use the service from another country, your data is transferred to and processed in the United States, where data-protection law may be different from the law where you live. The service cannot work without this.

Changes to this policy

When this policy changes in substance, its version number above changes, and we post the new text here. For changes that matter to customers with a paid plan we also email them as described in the Terms. This policy is governed by the Nevada law and courts named in the Terms.

Contact

The service is operated by Northgate Connect LLC, a Nevada limited liability company ("Northgate Connect LLC" or "the Company") in the State of Nevada, USA. In this policy, "we" and "us" mean the Company.

Contact: support@northgateconnect.us (or the Help page).

Business mailing address: Northgate Connect LLC, a Nevada limited liability company, 3614 Spencer Street, Las Vegas, NV 89169, USA.

隐私政策

版本：2026-10-25-v9

本中文版本仅为方便阅读而提供。如中文版与英文版之间有任何不一致，以英文版为准。

我们存储的内容

您注册时使用的电子邮箱地址、您的套餐（或免费试用）及其日期、您选择的 VPN 用户名，以及您已接受服务条款和隐私政策的记录（您的邮箱地址、日期、条款版本，以及在购买套餐时，您是否勾选了申请立即开通服务并接受失去 14 天撤回权的方框）。如果针对您的付款在 PayPal 发起了争议，我们会存储其 PayPal 参考编号和结果。我们不存储您的 VPN 密码（VPN 服务器上只保存加盐哈希）。我们不存储您的姓名、地址或银行卡信息，您的付款信息由 PayPal 保管。

VPN 服务器记录的内容

我们不记录您访问的网站、您的 DNS 查询或您的流量内容。但每次您连接时，VPN 服务器会记录连接信息：您的 VPN 用户名、您连接时使用的 IP 地址、分配给您的 VPN 内部地址以及时间。这些信息用于安全、防止滥用和故障排查。它们被写入服务器的系统日志，最多保存 30 天（或直到日志达到 1 GB 的容量上限，以先到者为准），然后自动删除。服务器的防火墙还会在同一个系统日志中记录被拦截的入站连接尝试（来源 IP 和端口，有速率限制），适用同样的 30 天上限。我们并不声称不保留任何日志：这些连接记录是存在的，在最多 30 天内，我们可以读取它们，并且在依据美国法律有效的法律程序要求下可能被提交。它们不会显示您在连接期间做了什么。

当您处于连接状态时，您的 DNS 查询由公共解析器（目前为 Cloudflare 1.1.1.1 和 Google 8.8.8.8）应答，它们看到的查询来源是我们服务器的地址，并按其各自的政策处理这些查询。

免费试用：我们如何执行“每人一次试用”

免费试用限每个电子邮箱地址一次、每个网络（IP）地址一次。为执行这一点，当您申请试用时，我们会保留：(a) 您邮箱地址（小写、去掉任何“+标签”，对 Gmail 还要去掉圆点）的加盐单向哈希，保存 12 个月，即使您删除账户也是如此，这样已删除的账户就不能直接再开始一次试用；以及 (b) 您的网络（IP）地址的加盐单向哈希（对 IPv6 仅取前半部分，即 /64 前缀）和您的网络运营商编号（ASN），二者在 30 天后删除。我们无法将这些哈希还原为您的邮箱或 IP 地址，但可以检查给定的地址是否与我们已做哈希的地址相符。可读的邮箱地址只存储在您的账户中（以及在您点击链接或其过期之前，存储在待确认的注册记录中；该记录在被使用后删除，且无论如何在过期后一天内删除）。我们使用按网络地址和按邮箱地址统计的短期注册请求次数来防止滥用。在您提交表单之前，注册页面会对此作出提示。

优惠券与推荐

如果您使用优惠券，我们会将您邮箱地址的加盐单向哈希连同优惠码一起保存 12 个月（即使您删除账户），以确保每个账户只使用一次优惠券。每个账户都有一个私人推荐链接。如果有朋友通过您的链接注册试用，我们会在您的账户中存储他们使用链接的日期、注册日期、状态，以及其邮箱地址的遮蔽形式（例如 s***@gmail.com），以便您在账户页面中查看；我们还会保留其邮箱地址的加盐哈希（以便每位朋友只给予一次奖励），并将其网络地址的哈希保留 30 天（以防止自己推荐自己）。该链接会在您朋友的浏览器中以 Cookie 的形式保存最多 30 天。推荐奖励分为两级：您的直接被推荐人，以及他们再推荐的人。对于第二级，我们使用相同的记录（这些人的遮蔽邮箱地址、日期和状态，以及他们是否已完成首次付款），将其显示在您的“您的网络”页面中，并据此计算您获得的奖励，同时保存一个用于累计您下一个免费月的付款计数器。我们不会向其他客户显示任何人的完整邮箱地址，也不会将这些信息提供给任何人用于营销。您的账户页面只向您本人显示这些记录，并且在您删除账户时，您所推荐的人的记录一并删除。如果您删除账户，您尚未使用的推荐奖励将失效，位于您之下的人也不再与您关联。

登录与邮件记录。密码登录失败时，我们会保留最多 24 小时的用户名和您网络地址的单向哈希，仅用于限制猜测密码，之后即删除。登录链接和注册链接分别在 15 分钟和 30 分钟后失效；登录会话最长持续 14 天。对于我们发送的每封邮件，我们会将收件地址、主题和状态保留 7 天（邮件正文在发送后即被移除）。

我们不做的事

本网站不运行分析或广告脚本。我们不在本网站的数据库中存储您可读的 IP 地址；唯一源自 IP 的数据是上述 30 天的哈希和网络运营商编号。我们的托管服务商（Cloudflare）可能会处理 IP 地址以提供本网站服务并限制滥用，并保留其自己的日志。

服务提供商

我们使用三家外部服务提供商。每一家均按其自身的条款和隐私政策处理其收到的信息。

您连接 VPN 期间的 DNS 查询由上述公共解析器应答。我们不出售您的信息，也不为广告目的而共享。如果依据美国法律有效的法律程序如此要求、为了保护我们的权利或本服务，或为了答复付款争议，我们可能会披露我们持有的信息。我们只能提供本页所述我们持有的内容。

保留与删除

您可以随时在账户页面删除您的账户和已存储的邮箱。结束的免费试用与结束的套餐同样处理：VPN 登录被关闭，保留 30 天，然后删除，其他账户数据约在此后 90 天删除。已结束的账户会被锁定 30 天，然后 VPN 账户被删除，您其他已存储的数据约在锁定后 90 天删除。接受记录（邮箱地址、日期、条款版本，以及您对撤回权方框的选择）作为您所同意内容的证明会保留更长时间：自您接受之日起 3 年，并且在您的账户被移除后至少 1 年，然后删除。即使您删除账户，该记录也会保留。付款争议未结期间，我们会保留账户记录直到争议解决。

您的隐私权利

如何提出请求。您可以要求我们提供我们持有的关于您的个人数据副本（查阅）、更正或删除这些数据。请使用您的账户邮箱地址发送邮件至 support@northgateconnect.us（我们可能会请您确认是您本人），或在账户页面自行删除账户。我们会在 30 天内答复。如果您所在地的法律赋予您更多权利（例如反对或限制处理、以可移植格式获取数据、撤回同意），您可以用同样的方式行使。如果您位于欧洲经济区、英国或瑞士，您也可以向您所在地的数据保护机构投诉；如果您是加利福尼亚州居民，您享有知情、更正和删除的权利，我们不会因您行使这些权利而歧视您。我们会保留法律要求或允许我们保留的内容（例如上文所述的接受记录），PayPal 也会保留其自己的付款记录。

我们为何使用您的数据（法律依据）。为提供您所要求的服务并通过 PayPal 收款（履行我们与您的合同）；为保障服务安全、防止滥用和欺诈、执行“每人一次试用”规则，并保留您所接受内容的证明（我们的合法利益）；以及为遵守法律和响应有效的法律程序（法律义务）。我们不将您的数据用于广告，也不出售您的数据。

在哪里处理。我们的 VPN 服务器、网站及其数据库，以及上文所列的服务提供商均在美国运营。如果您在其他国家使用本服务，您的数据将被传输到美国并在美国处理，美国的数据保护法律可能与您所在地的法律不同。没有这一点，本服务无法运作。

本政策的变更

当本政策发生实质性变更时，上方的版本号会随之改变，我们会在此发布新的文本。对于对付费套餐客户重要的变更，我们还会按条款所述通过电子邮件通知他们。本政策受条款中所述的内华达州法律和法院管辖。

联系方式

本服务由 Northgate Connect LLC（一家内华达州有限责任公司，以下称“Northgate Connect LLC”或“本公司”）在美国内华达州运营。在本政策中，“我们”指本公司。

联系方式：support@northgateconnect.us（或帮助页面）。

营业邮寄地址：Northgate Connect LLC（一家内华达州有限责任公司），3614 Spencer Street, Las Vegas, NV 89169, USA。