Who we are
ROMbug Earth is a network-intelligence web browser with an optional VPN, published by ROMbug, based in Vermont, United States. In this policy, “we” and “us” mean ROMbug, and “the app” means ROMbug Earth.
This policy explains what personal data we handle, why, and what choices you have. It applies to the app and to rombugearth.com.
What we collect
We collect as little as we can while still being able to sell you a licence and keep your VPN working.
| What | Why we have it | How long |
|---|---|---|
| Email address | To send your licence key and receipts, and to contact you about your subscription. | While your subscription is active, then up to 24 months for accounting and support. |
| Licence key and subscription status | To check whether your VPN access is valid. | Same as above. |
| VPN account identifier | An internal reference linking your licence to the VPN account provisioned for you. | Deleted when your subscription ends. |
| Payment records | Held by Stripe, our payment processor. We can see that a payment succeeded and the last four digits of the card; we never receive the full card number. | As required by tax and accounting law. |
| Server logs | Our licensing server records requests (IP address, time, and the endpoint called) to keep the service running and to detect abuse. | Rotated automatically, typically within 30 days. |
What we do not collect
- Your browsing history. The app records history and bookmarks in a database on your own computer so the browser works. That file never leaves your machine and we cannot read it.
- Site lookups. When the app shows you a site's IP address, host and certificate details, those checks are made from your computer. We do not receive the results.
- Analytics or telemetry. The app contains no usage tracking, advertising identifiers, or third-party analytics.
The VPN
The VPN servers are operated for us by a contracted infrastructure partner. When you activate the VPN, we ask that partner to create an account for you and pass the resulting configuration to the app.
Our infrastructure partner states that it operates a strict no-logs policy, and does not monitor, collect or disclose customer activity or browsing history. We rely on that undertaking, and we do not ourselves receive, store or have access to records of your VPN traffic.
Separately from VPN traffic, we do hold the account records described above — the email you bought with and the licence attached to it. “No logs” refers to what you do, not to whether we know you bought a licence.
Who else is involved
We use a small number of services to run the product. Each receives only what it needs.
| Service | What it handles |
|---|---|
| Stripe | Payments and subscriptions. Stripe holds your card details; we do not. |
| Our email provider | Sends your licence key and account emails. Receives your email address only. |
| Our hosting provider | Runs the licensing server that issues and checks licence keys. |
| Our VPN infrastructure partner | Operates the VPN servers and creates the account used by your licence. |
We do not sell personal data, and we do not share it for advertising. We will disclose data if we are legally required to do so, and only to the extent required.
Your choices
Cancelling
You can cancel at any time from the subscription management page linked in your licence email, or by writing to us. Your access continues until the end of the period you have paid for.
Seeing or deleting your data
Write to support@rombugearth.com and we will tell you what we hold about you, correct it, or delete it. We will respond within 30 days.
Deleting your account data ends your VPN access, because the licence key is how access is granted. We may keep payment records where tax law requires it.
If you are in California, the EU or the UK
You have rights to access, correct, delete and port your data, and to object to certain processing. We apply these rights to everyone, wherever you live, rather than only where the law compels it. We do not sell or share personal information as those terms are defined under California law.
Security
Licence data is held on a hosted server with encrypted connections. VPN configuration files written to your computer are stored with user-only permissions. Card details never reach our systems.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as required by Vermont law and any other law that applies to you.
Children
ROMbug Earth is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects how we handle your data, we will email active subscribers before it takes effect.
Contact
ROMbug
150 Dorset Street, STE 245, PMB #217
South Burlington, VT 05403
United States