TOLF VPN

Privacy and your data. Приватность и ваши данные. Privātums un jūsu dati.

Privacy

You do not need to provide your name, surname, phone number or email address to register with TOLF VPN.

You sign in with a Passkey. Your account receives a randomly generated identifier. This reduces the information required to register, but it does not mean the service processes no data.

What the service stores

Account and Passkeys
Your account identifier and creation date, registered Passkey identifiers and public keys, and technical information used to verify sign-ins.
Sign-in sessions
A hash of each session token, the associated account, and the session creation and expiry dates. These records let you stay signed in.
VPN access and profiles
Your VPN username, creation date and server access settings. VPN servers store the credentials needed for authentication. Generated installation profiles include the VPN username, password and connection settings.
Promo codes
Accepted codes and their redemption dates are recorded for the account. Attempts to apply a code are also recorded to limit guessing. Promo codes are stored as hashes. A promo code does not affect the availability of Riga or Moscow.
Recovery
The account database stores a hash of your Recovery Code. The code itself is shown when it is issued; the service cannot show the existing code again.

Passkeys and VPN passwords are different

The private part of your Passkey is managed by your device or password manager. TOLF receives the public key and sign-in verification data, not the private key. Apple explains how Passkeys work.

The VPN password is a separate credential. It is available to the VPN provisioning system and is included in the Mobile Config file so your device can connect.

Installation files and their metadata are uploaded to Cloudflare R2 for download. Treat the installation link and the downloaded file as confidential: someone with the link may be able to download a profile containing your VPN credentials.

What is stored in your browser

The tolf_session cookie keeps you signed in for up to 30 days. Signing out ends that browser session. Your language choice is saved locally under tolfLanguage.

Clearing browser data does not delete your TOLF account or a VPN profile installed on your device.

Network privacy and logs

Providing the service requires processing network information, including IP addresses. VPN servers handle traffic and destination addresses; DNS resolvers handle the domain lookups sent to them. Hosting and delivery providers also participate in processing requests to the website and profile downloads.

To recommend a VPN entry point, Cloudflare derives the connection country from the IP address. The TOLF website receives only the resulting Riga or Moscow recommendation and does not record the IP address for this feature.

What deletion does

Delete VPN Access removes the VPN credentials from both servers. Your TOLF account, Passkeys and accepted promo code remain, so you can create VPN access again.

Delete TOLF Account also removes the active account records: Passkey registrations, sign-in sessions, the Recovery Code hash and VPN access.

A promo redemption record remains with its date, but without its account reference, so deleting an account does not restore the code’s usage allowance. Technical profile identifiers are also retained so replacement profiles can preserve their identity.

Account deletion does not guarantee immediate erasure of backups, previously issued profile files or infrastructure logs. Removing a profile from your device is a separate action.

Trial registration and account deletion

If you explicitly register a trial account, TOLF records that choice, its date and registration method. Ordinary free registration is not automatically classified as a trial. The mark remains after a paid traffic purchase, so administrators can see the trial registration and payment status. Explicit trial registration grants 1 GB once per account without a time limit. TOLF stores the grant date, traffic counters and remaining balance separately from paid traffic. After reported trial traffic is used up, VPN forwarding is restricted until a paid package is credited. Technical package and public VPN identifiers may remain after account deletion to keep issued access revoked. An administrator can delete an eligible account and revoke device access; protected accounts and administrators cannot be deleted through that control. Payment records required for accounting are retained. Trial-registration records are removed when the account is deleted, while an administrative deletion audit remains.

Website statistics

TOLF keeps aggregate page-view statistics for up to 90 days: time, public page path and referring domain. IP addresses, full URLs, query parameters, search terms and user-agent strings are not stored in this statistics database. Known bots, administrative pages and excluded browsers/accounts are not counted. Page views alone do not identify people.

Only with your permission, this browser stores a random analytics identifier for 30 days to recognise repeat visits; a visit ends after 30 minutes of inactivity. Your choice is stored for 180 days. You can change it using “Website statistics” at the bottom of a page. Choosing “Page counts only” removes the browser identifier and stops future recognition. Do Not Track and Global Privacy Control are respected. The statistics stay on TOLF’s server and are visible only to administrators.

Updated: .

Controller and payments

The controller is SIA “Tolf”, registration number 40203551237, Brīvības iela 101–6, Rīga, LV-1001, Latvia. Contact: tolf@velbnk.is; +371 26165804. When payments launch, order identifiers, package, amount, currency, payment status and transaction references will be linked to your account to supply the service, handle refunds and meet accounting obligations. Montonio is the planned payment provider; its privacy notice applies to payment data it processes. TOLF does not receive the full card number or card security code. Statutory transaction records may need to be retained after account deletion. Contact the controller to exercise applicable data-access, correction, deletion or objection rights; you may also complain to Latvia’s Data State Inspectorate (dvi.gov.lv).

Company and contacts · Terms of service · Montonio