EDEN
Legal

Privacy Policy

Last updated: October 14, 2026

This Privacy Policy explains how EDEN (“EDEN”, “we”, “us”) collects, uses, and safeguards information when you visit edenvpn.xyz (the “Site”) or use the EDEN in-house iOS project (the “App”). We take a minimal-data approach: we collect only what we need to deliver the service and we do not sell or share personal information for advertising.

Contents
  1. Information collected through the website
  2. Information handled by the EDEN app
  3. Your personal media and separate accounts
  4. Sub-processors
  5. Cookies and tracking
  6. Data retention
  7. Your rights
  8. Children
  9. Changes to this policy
  10. Contact

1. Information collected through the website

The existing Start a project contact form asks for information you voluntarily provide:

We use this information solely to respond to your inquiry. It is delivered to our internal contact@edenvpn.xyz inbox via our transactional email provider (see Sub-processors). We do not add form submissions to marketing lists, and we do not share them with third parties.

Website pricing builder: live test

The website pricing builder is currently for testing with sample information only. Do not submit sensitive information, passwords, private customer records, or photos you do not have permission to share. Its form can collect your business and contact details, business description, website or social links, project preferences, selected services, estimate, and uploaded photos.

Test submissions and photos are stored in private storage on our Hetzner server for manual review and testing. They are not published as website content. Local backups also contain this information. This form does not currently send automatic email notifications or confirmation emails. A submitted estimate is not an order or payment.

Automated deletion of pricing-builder test records has not been configured. To request deletion, email contact@edenvpn.xyz and include your submission reference. We will review retention and notification arrangements before opening this builder for real customer inquiries.

Server logs

Like most websites, our web server records standard request metadata (IP address, user agent, timestamp, requested URL, response status). These logs are used for security, abuse prevention, and infrastructure troubleshooting only. They are rotated on a rolling basis and are not linked to any marketing profile.

Error reports from member pages

Member pages on the Site send a short error report to the same EDEN-run error tracker when something breaks: the error type, a cleaned error message, the page path (without query strings) and your browser family. These reports never include cookies, stored data, form fields, names, email addresses or account details, and at most five are sent per page visit.

2. Information handled by the EDEN app

The EDEN app lets you connect compatible personal media sources. An EDEN Sync Account is optional and is not required to connect and play your personal media. Sync is available only in compatible app versions that include the EDEN Sync Account feature; an older installed beta may not include it. Android device compatibility is being tested separately.

3. Your personal media and separate accounts

A free EDEN Sync Account supplies synchronization only. It does not include movies, shows, live channels, media-source credentials or a content subscription. Connect your personally owned media, or another source for which you hold the necessary access and playback rights. A login or disclaimer does not establish those rights, and the app does not authorize bypassing copy protection or provider restrictions.

Source connections, source accounts and any separate service subscriptions are distinct from EDEN Sync. Deleting the sync account does not delete your media, close an independently connected account, or cancel a separate subscription. The source provider’s own privacy practices and terms also apply to information it receives.

4. Sub-processors

We use a small number of vetted third-party services to run the Site and the App:

Hosting and email providers process information needed to perform their services. Apple and independently selected media providers also apply their own privacy terms. Depending on the feature and provider, information may be processed outside your country. We do not use ad networks, analytics trackers, or third-party marketing pixels.

5. Cookies and tracking

The Site does not set any advertising or analytics cookies. Session cookies may be used strictly to keep you signed in to internal areas of the Site if you ever authenticate to one. We do not use cross-site tracking, we do not use fingerprinting, and we do not sell or share personal data with data brokers.

6. Data retention

EDEN Sync accounts and profiles

While your sync account is active, we retain the account and synced information needed to provide synchronization. In an app version with EDEN Sync Account settings, you can request account deletion in the app by entering your current sync password and confirming deletion. This is different from signing out.

On acceptance, all sync sessions are revoked and login and recovery are disabled immediately. Your account and its synced data are held for seven days, then permanently removed by the deletion worker on its next scheduled run, normally within one minute of the deadline. There is no account-restoration or cancellation feature during this hold. Once deleted, the account and its sync data cannot be recovered.

The app displays the scheduled deletion date and saves a private receipt that lets that device check completion in Sync Account settings. After deletion, we retain only a hashed receipt and request/deletion timestamps, no longer linked to the account, for 30 days so completion can be checked. That receipt record is then removed. No deletion-confirmation email is sent.

Deleting an individual profile requires confirmation and removes that profile and its favorites, watch state and activity immediately from active sync storage, without the seven-day account hold. Other devices may continue to display cached information while offline; server access to the deleted profile is blocked, and it disappears on the next successful refresh. Source-server records and independently stored device data are not erased by this action.

The sync database is excluded from our local backup archives. The current sync host has automatic cloud backups disabled and no retained cloud backup or snapshot images. We do not maintain a separate recovery backup of this sync database, so a server failure may result in loss of synced information. Backup arrangements must not extend the disclosed deletion period; we will review retention before introducing additional sync backups.

For help with a deletion request or a lost completion receipt, contact contact@edenvpn.xyz. We may need to verify your request without relying on ownership of an unverified login email alone.

Other information

7. Your rights

You may request that we access, correct, or delete personal information you have submitted to us by emailing contact@edenvpn.xyz. We will respond within a reasonable time. Depending on your location, you may also have additional rights under laws such as the GDPR (EU/UK) or CCPA/CPRA (California), including the right to lodge a complaint with your local data-protection authority.

8. Children

The Site and the App are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information to us, please contact contact@edenvpn.xyz and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page and, where appropriate, by a more prominent notice on the Site or in the App.

10. Contact

Questions about this Privacy Policy or about our data practices can be sent to contact@edenvpn.xyz.