Privacy policy

Last updated November 9, 2026

This policy explains what personal data NexLogin ("we") collects through nexlogin.io and the NexLogin app, why, and what you can do about it.

What we collect

  • Your account: email address, password (stored only as a one-way hash), plan, and the answers you give at sign-up (profile count, intended use, operating system).
  • Sign-in records: for each sign-in attempt, the time, IP address, country (from our network provider), browser user agent and whether it succeeded. We use these to protect your account and to stop abuse.
  • How you found us: on your first visit, the page you landed on, the referring site and any campaign tags in the link (UTM parameters). We store these in your browser together with a random visitor ID, and attach them to your account when you sign up.
  • Sign-up steps: when you click a sign-up or download button, start the sign-up form, confirm your email or sign in, we record that step with your visitor ID or account. We use this to see which pages and campaigns work. We don't record every page view or use advertising trackers.
  • Profile data you sync: if you turn on cloud sync in the app, browser profile data is encrypted before upload. We store it to sync it between your devices and do not inspect it.

What our free tools collect

Our free tools run entirely in your browser. Results are not sent to us. The WebRTC checks contact a public STUN server (Google or Cloudflare) to learn your public IP address, as any WebRTC call does. The IP leak test also asks ipify (api.ipify.org), a public IP lookup service, which IP your requests come from. These requests go from your browser to those services, not to us.

How we use data

To activate your account, provide and support the service, process payments, keep the service secure, and send product updates you can opt out of. We do not sell personal data.

Retention

We keep sign-up data until your account is activated or you ask us to delete it, and account data for as long as your account is open plus any period the law requires.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it, by emailing [email protected].

Changes

We will post changes on this page and update the date above.