Legal

Privacy Policy

Last updated: October 16, 2026

What we collect

• Account data: your email, name and a hash of your password (we never store the password itself).
• Usage data: bytes transferred per day, which tunnels and agents are online, and an activity log of changes made in your account.
• Billing data: handled by Stripe. We see your plan, billing email and invoice history, not your full card number.
• Technical data: IP addresses of sign-in attempts, used to throttle password guessing.

Traffic through your tunnels

Wormhop forwards traffic between visitors and your agent. We meter how much passes through, but we don't inspect or store what's inside it beyond what forwarding needs, such as the HTTP Host header used to route a request.

Cookies

We use one essential cookie to keep you signed in. We don't use advertising or cross-site tracking cookies.

Sharing

We share data only with the providers we need to run the service, such as our hosting provider and Stripe for payments, or when the law requires it. We don't sell personal data.

Retention and your rights

We keep account data while your account exists, and billing records as long as tax law requires. You can ask us for a copy of your data, or to correct or delete it, by emailing hello@wormhop.dev.