Privacy Policy

1. Introduction and scope

This Privacy Policy explains how Saturney Limited (“Virtelink”, “we”, “us”), an operator established in Hong Kong, handles information through the Virtelink iOS and iPadOS application and the Virtelink website. Virtelink is a network diagnostics and local configuration management utility. It does not require an account and does not provide commercial VPN servers, proxy nodes or subscriptions.

Questions or privacy requests may be sent to [email protected]. This policy applies only to Virtelink. A VPN server, DNS resolver, diagnostic destination, email provider or other service you choose may apply its own privacy terms.

2. Information processed

The app processes network path status; public IP results; hostnames, ports and DNS answers used in diagnostics; connection outcomes, timing and error text; imported WireGuard and OpenVPN files; profile metadata; preferences; and, when supplied for an OpenVPN connection, a username and password.

Profiles, diagnostic history and preferences are processed locally as described below. A public IP request, DNS lookup, TCP/TLS test or VPN connection necessarily sends limited information to the relevant external system. Saturney Limited does not operate an app analytics, advertising, crash-reporting or diagnostic collection backend in the audited first release. The website uses no analytics, advertising scripts, tracking pixels, third-party fonts or tracking cookies.

3. Local configuration files and credentials

When you select a .conf or .ovpn file with the iOS document picker, the app reads that file under the access granted by iOS, validates it and copies the full configuration into the Virtelink App Group container. Virtelink does not retain ongoing access to the original document. The stored copy may contain WireGuard private or preshared keys, OpenVPN certificates, embedded keys, endpoints and other sensitive material. Profile name, protocol, source filename, endpoint, creation date and a SHA-256 content fingerprint are also stored locally.

Configuration files and metadata use iOS file protection “complete until first user authentication.” This protects files according to the device passcode and iOS security state, but is not end-to-end encryption and does not replace device security. The app does not upload these files to Saturney Limited.

If you enter an OpenVPN username and password, the app passes them to the Network Extension for that connection. The extension temporarily stores the password in the iOS Keychain so the OpenVPN engine can use it, and its code attempts deletion when the tunnel stops normally or fails to start. The username is attached to the system VPN protocol object during the connection. An abnormal extension termination may prevent immediate cleanup; this lifecycle requires additional release testing. Credentials embedded directly inside an imported profile remain in the local profile until that profile is deleted.

4. Network diagnostic requests

Network tests cannot be performed without communicating with network infrastructure. The recipient normally sees the source IP address and ordinary connection metadata required to respond.

• Public IP: refreshing the overview sends an HTTPS GET request to https://www.cloudflare-cn.com/cdn-cgi/trace. The request uses an ephemeral URLSession with app-side caching disabled. Cloudflare can observe the requesting IP address and protocol metadata and returns the IP address, address family and trace fields. The app keeps the latest result in memory only and does not add it to diagnostic history.
• DNS: the app passes the hostname you enter to the resolver currently available to iOS. Your network, VPN or resolver provider may receive the hostname and source-network metadata. Up to four returned addresses may be saved in local diagnostic history.
• TCP and TLS: the app attempts direct connections to the hostname and port you provide. The destination and intervening network operators can observe the source IP, destination, port, timing and protocol negotiation. The app does not send application payload content during these probes.
• VPN: when you connect, iOS routes traffic through the WireGuard or OpenVPN endpoint in your imported configuration. The VPN operator and the services you access can process traffic and connection metadata under their own policies. Saturney Limited does not receive or proxy that traffic.

5. Third-party services and platform components

The public IP check uses Cloudflare’s managed /cdn-cgi/trace endpoint. Cloudflare states that its services may process end-user IP addresses, routing data, system configuration and other traffic information. Cloudflare’s general policy does not specify a retention period for this exact trace endpoint, and Saturney Limited has not verified a contractual retention setting for it. Do not apply Cloudflare’s separate 1.1.1.1 resolver retention statement to this request. See Cloudflare’s Privacy Policy at https://www.cloudflare.com/privacypolicy/.

DNS resolvers, VPN servers and diagnostic destinations are chosen by the user, the imported profile or the current network. Their identity and retention practices cannot be determined by Virtelink. Apple provides iOS, Network Extension, the document picker, Keychain, device storage and system VPN preferences under Apple’s terms. The app includes WireGuardKit, TunnelKit/OpenVPN, Apple SwiftLog and OpenSSL libraries; the audited code contains no analytics transmission by these libraries.

6. Website and support communications

The website itself does not set tracking cookies or load analytics, advertising or behavioral-monitoring scripts. The production hosting and network provider may nevertheless process IP address, request time, requested path, user-agent and security events in routine access logs. The final production host, enabled logging features and retention period have not yet been verified and must be confirmed before release.

If you email us, we receive your email address and whatever text or attachments you choose to provide. Do not send passwords, private keys or full VPN profiles. A binding support-email retention schedule has not yet been approved; until it is, no fixed deletion period is promised. You may request deletion, subject to legal, security and dispute-preservation requirements.

7. Data retention

Imported profiles remain in the App Group container until you delete the individual profile, choose Delete All Profiles, or remove the app data through iOS. Profile metadata is also copied to UserDefaults as a local fallback. Diagnostic history is stored in UserDefaults and is limited to the 10, 20 or 50 most recent reports selected in Settings; reducing the limit takes effect when a later diagnostic is saved. Preferences remain until changed or app data is removed. The public IP result and current network path snapshot are memory-only for the running app session.

The app does not set retention periods for a chosen DNS resolver, VPN server, diagnostic destination, Cloudflare or Apple. Their retention is controlled by those parties. Cloudflare trace retention and production website log retention remain unverified. iCloud or device-backup copies, if any, are governed by iOS and the user’s backup settings.

8. Data deletion and user choices

You can delete a profile or all profiles in Virtelink, clear diagnostic history in Settings, avoid running optional diagnostics, stop a VPN connection and remove the saved Virtelink VPN configuration in iOS Settings. Diagnostic history can be exported through the iOS share sheet only when you choose to share it. Deleting the app is expected to remove its local app and App Group container data, subject to iOS behavior and any device or iCloud backup; saved system VPN preferences should be checked separately.

Virtelink has no cloud account to delete. For personal information in support correspondence or otherwise held by Saturney Limited, email [email protected]. We may verify the requester and may retain information where required by law or reasonably necessary for security or disputes. Saturney Limited cannot delete information independently held by a VPN operator, resolver, destination, Cloudflare or Apple; contact that party directly.

9. Security

We minimize first-party network services, use HTTPS for the public IP check, rely on iOS sandboxing and file protection for local profiles, and use the system Keychain for the temporary OpenVPN password reference described above. Tunnel logging masks private OpenVPN data, but WireGuard and tunnel error messages are written to Apple unified logging with public visibility in the current build and may contain technical connection details. No storage or transmission method is completely secure. Protect your device, use trusted profiles and redact secrets before contacting support.

10. Children’s privacy

Virtelink is a general-purpose technical utility and is not directed to children. We do not knowingly request children’s personal information or provide child-specific accounts. If you believe a child has sent personal information to Saturney Limited through support, contact us so we can review and, where appropriate, delete it. This statement is not a representation that the app is certified under any particular children’s privacy law.

11. International processing

Saturney Limited is established in Hong Kong. Network requests may be processed wherever Cloudflare, the selected DNS resolver, the selected VPN server, the diagnostic destination, Apple or the website/email provider operates. Anycast routing means a request may be handled outside your country. Because the production host and the operators selected by users vary, specific processing countries cannot be guaranteed. Where Saturney Limited controls a transfer and applicable law requires safeguards, we will use an appropriate legal mechanism.

12. Changes and contact

We may update this policy when the app, website, vendors or legal requirements change. The version and effective date above identify the current text. We will provide additional notice of material changes when required. The English, Simplified Chinese and Traditional Chinese versions are intended to have the same meaning; if an unintended translation difference exists, contact us for clarification.

Controller: Saturney Limited · Jurisdiction: Hong Kong · Email: [email protected] · Website: https://virtelink.crystalmeadow.world