Skip to content
Lagvolt

Privacy policy

Last updated 16 October 2026

This policy covers the Lagvolt app, our relays and this website: what personal data we collect, why, how long we keep it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). It describes how our software actually works.

The short version

  • We don't record the websites or game servers you connect to, your DNS queries or the content of your traffic.
  • We keep your account, your devices and a record of each VPN session: when it ran, which relay and server region it used, and how much data it moved.
  • There are no passwords. You sign in with an emailed code, Discord or Google.
  • The app and this website have no analytics, ads or trackers. This website sets no cookies.
  • We don't sell your data.

Who we are

Lagvolt is run by [Company legal name], a company registered in England and Wales (company number [Company number]), registered office [Registered office address]. We are the controller of your personal data, registered with the Information Commissioner's Office (ICO) under number [ICO registration number].

Questions about this policy or your data: [email protected]. Our representative in the EU: [EU representative name and address (EU GDPR Art. 27)].

What we collect and why

Lawful basis means the reason UK GDPR allows each use: contract (we need it to provide the service you signed up for), legal obligation, or legitimate interests (our interest, weighed against yours; you can object).

Account

Email address, a display name (from your email address, or your Discord or Google profile), account id, sign-up date, and your Discord or Google account id if you sign in with them.

Why
To create your account, sign you in and help when you contact us.
Lawful basis
Contract
How long
Until you close your account, then deleted within 30 days.

Sign-in codes and tokens

The email address each sign-in code was sent to, a hash of the code, and a hash of each sign-in token. Never the code or token itself.

Why
To sign you in without a password and keep you signed in.
Lawful basis
Contract
How long
Codes: about a day after they expire (they last 10 minutes). Tokens: when they expire, 60 days after last use.

Plan and billing

Plan, trial and renewal dates, monthly or yearly billing, Stripe customer id, subscription status. We never see your full card number.

Why
To give you what you paid for and keep billing records.
Lawful basis
Contract; legal obligation for tax records
How long
While your account is open. Billing records: 6 years, as UK tax law requires.

Devices

Each PC's Windows computer name, its WireGuard public key, when it was added and when it last connected. Router configs appear as a device named "Router".

Why
To let your devices connect, and to apply the 10 device limit.
Lawful basis
Contract
How long
Until you close your account. A removed device stays on record as removed, so its key can't be used again.

Tunnel addresses

The private address each device uses on each relay, and when it was last used.

Why
To keep your connection settings stable between sessions.
Lawful basis
Contract
How long
Until you close your account, or sooner if the address is given to someone else after 30 days without use.

VPN sessions

Account, device, relay, server region, traffic mode (Game only or All traffic), start and end time, and how much data was sent and received.

Why
To answer support questions and investigate abuse.
Lawful basis
Legitimate interests
How long
90 days after the session ends.

Abuse reports

A complaint we received about traffic from our relays, the account we matched to it and what we did.

Why
To deal with abuse of our relays and answer our hosting providers.
Lawful basis
Legitimate interests
How long
2 years

Ping measurements

The latest ping from each of your devices to each relay. One value per relay, replaced each time.

Why
To pick a relay for you when you choose Fastest.
Lawful basis
Contract
How long
Until the next measurement replaces it, and no longer than 30 days.

Smart DNS home IP

One public IPv4 address per account, and when you authorized it.

Why
So relays answer Smart DNS requests from your home network. It's copied to every relay.
Lawful basis
Contract
How long
Until you sign out of the app, ask us to remove it, or close your account.

Dedicated IP and port rules

Which dedicated IP you have and on which relay, and your port forwarding rules (name, protocol, ports).

Why
To provide the dedicated IP add-on.
Lawful basis
Contract
How long
Until you remove it in the app or the add-on ends.

Your IP address when the app contacts our API

Why
To limit how many requests one address can make, and to suggest your Smart DNS home IP.
Lawful basis
Legitimate interests; contract for Smart DNS
How long
Held in memory for about a minute. Not written to our database or logs, unless you authorize it as your Smart DNS home IP.

Emails you send us

Your message, email address and anything you attach, such as log files or screenshots.

Why
To answer you.
Lawful basis
Legitimate interests
How long
2 years after your last message.

You need to give us an email address, or sign in with Discord or Google, to have an account, and the app has to register your PC's name and public key to connect it. Without these we can't provide Lagvolt. Smart DNS, the dedicated IP and emailing us are optional.

We email you sign-in codes, and messages about your account and our service, such as a change to your price, our terms or this policy, or a security problem. We don't send marketing email. If you buy a plan, Stripe may email you receipts.

What we don't collect

We never store:

  • the websites, game servers or other addresses you connect to
  • your DNS queries, or the server names your apps ask for
  • the content of your traffic
  • a record of individual connections

Our API's logs

Each request to our API is logged with its method, path, status and how long it took. Not your IP address, and not the query string, headers or body. Errors are logged with their type and message, but never the values in a failed database request, and email addresses are removed. A few billing warnings include your account id or Stripe customer id. Our API's logs are kept for [Railway log retention].

Relays

Relays keep no connection logs. The relay software logs state changes and counts only, never IP addresses, keys or domain names. Each relay stores the public keys, tunnel addresses and dedicated IPs of the devices that use it, and the full list of Smart DNS home IPs, because a console can use any region's relay.

While your device is set up on a relay (up to 30 days after you last use it), WireGuard on that relay keeps the public IP address you last connected from, in memory only, so it can send traffic back to you. Open connections are tracked in memory the same way, as on any router, and disappear when they end.

Like any VPN server, a relay removes the WireGuard encryption to pass your traffic on. Most game and web traffic is encrypted on its own. We don't record it. For Smart DNS, the relay reads the domain name at the start of each HTTPS connection to a listed game service, to send it on, and doesn't keep it.

Relays look up domain names through Cloudflare's 1.1.1.1, and in All traffic mode the tunnel uses 1.1.1.1 as your DNS server. Cloudflare sees those lookups coming from the relay. Smart DNS setup uses Google's 8.8.8.8 as your console's second DNS server, so your console may send some lookups to Google directly.

Many users share each relay's address. A dedicated IP is yours alone, so traffic from it can be linked to your account if we receive an abuse report about it.

Our providers' own logs

Railway, which hosts our API, and Cloudflare, which hosts this website, handle connections before they reach us and may keep short technical logs, including IP addresses, under their own policies. [Confirm what each keeps and for how long]

On your PC

The app keeps these on your PC:

  • In Windows Credential Manager: your sign-in token, your device's WireGuard private key, and the key for router configs. Private keys never leave your PC, except a router key written into the .conf file you save.
  • %APPDATA%\Lagvolt\state.json: your device id and public key, and the last server region you used.
  • The app's own storage: your settings, the email address and plan it last showed, and your console setup choices.
  • Logs, %LOCALAPPDATA%\Lagvolt\logs\app.log and %ProgramData%\Lagvolt\logs\service.log: connection events such as the relay, your tunnel address, network adapter names and a shared console's local address. They roll over at 5 MB and stay on your PC unless you send them to us.

When you share your connection with a console, the app reads the console's local address, hardware (MAC) address and name from Windows to show them on screen. They stay on your PC.

The app connects to:

  • our API, for your account, devices, VPN sessions and ping summaries
  • relays, for the tunnel and to measure ping
  • one Amazon Web Services address per server region, timing a single connection to measure your direct ping. Like any server, it sees your IP address.
  • Discord, Google or Stripe, in your browser, only when you sign in with them or pay

The app has no analytics, crash reporting, ads or third-party trackers.

This website and cookies

This website is a set of static pages served by Cloudflare. It sets no cookies, stores nothing in your browser, and loads no analytics, ads, third-party scripts or fonts. Cloudflare processes your IP address to deliver the pages and protect the site from attacks.

Stripe's checkout and billing pages open on Stripe's own site and use Stripe's cookies.

Who we share it with

These providers process data for us, under contracts that limit them to doing so:

Stripe

What for
Payments
What they get
Your email address, account id, and the card details you enter at checkout
Where
United States

Resend

What for
Sending sign-in codes
What they get
Your email address and the code
Where
United States

Railway

What for
Hosting our API and database
What they get
The account and service data above
Where
[Railway region]

Relay hosting providers

What for
Hosting relays
What they get
Your traffic as it passes through, and the relay data described above
Where
[Providers, and the countries relays run in at launch]

Cloudflare

What for
Hosting this website; domain lookups from relays
What they get
Website visitors' IP addresses; lookups that come from a relay, not from you
Where
Worldwide

Email inbox provider

What for
Receiving emails you send us
What they get
Your messages and email address
Where
[Provider and location]

Discord or Google

What for
Sign-in, only if you choose it
What they get
They send us your account id, verified email address and display name
Where
United States

Stripe, Discord and Google also use data for their own purposes (Stripe for fraud prevention and legal duties, for example) under their own privacy policies.

We disclose data to authorities only when UK law requires it, such as under a court order, and can only hand over what this policy says we have. We don't sell your data or share it for advertising.

International transfers

Some providers are in the United States, and relays can run in countries outside the UK, near the game servers they serve. Your Smart DNS home IP is copied to every relay.

To protect data sent outside the UK, we rely on UK adequacy regulations where they exist (including the UK-US data bridge for certified US companies), and otherwise the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses in each provider's data processing agreement. Ask us for a copy of the safeguards.

How long we keep it

The table above gives each item. When you close your account, we delete it and everything linked to it within 30 days, except billing records we must keep by law. Backups are overwritten within [backup period].

Your rights

Under UK GDPR you can ask us to:

  • give you a copy of your data
  • correct it
  • delete it
  • limit how we use it
  • send the data you gave us to you or another service, in a machine-readable format
  • stop using it where we rely on legitimate interests

Email [email protected] from the address on your account. It's free, and we reply within one month. We may ask you to confirm it's you.

In the app, signing out removes your Smart DNS home IP, and you can remove your dedicated IP and port rules. The app can't close your account yet: email us and we'll do it.

We don't make decisions about you by automated means that have legal or similarly significant effects.

Complaints

Tell us first at [email protected] and we'll try to put it right. You can also complain to the ICO at ico.org.uk/make-a-complaint or on 0303 123 1113. In the EU or EEA, you can complain to your local data protection authority.

Children

Lagvolt isn't for children under 13, and we don't knowingly collect their data. If you think a child under 13 has an account, email us and we'll delete it.

Security

  • The app talks to our API over HTTPS, and your traffic to relays is encrypted with WireGuard.
  • Relays fetch Smart DNS home IPs and port rules from our API over HTTPS only.
  • Sign-in codes and tokens are stored as hashes, and your device's private key never leaves your PC.
  • If a breach puts your data at risk, we tell the ICO within 72 hours where the law requires it, and tell you without undue delay if the risk to you is high.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your data, we'll email you before it takes effect.

Contact

Email [email protected], or write to [Company legal name], [Registered office address].