Privacy policy

Version of 22 October 2026. Applies to the “ComfyVPN for Browser” extension. Русская версия

On first start the extension shows what data it sends, before it sends anything, and starts working only after you agree (since version 0.6.3). This policy describes the same in more detail.

What we do not collect

Your browsing history, page content, forms or site passwords. We keep no log of visited sites: when a site's traffic goes through Comfy, the server sees which site the connection is to (like any proxy), but not the content of HTTPS pages, and records it nowhere.
The “Today through Comfy” list is stored only in your browser and is never sent anywhere.

What we store

Installation ID — a random number the extension gets after your consent, plus the browser, OS and extension version. Sent with every request to our server and when the extension is removed. Needed to give you separate access to our servers.
Traffic volume — how many bytes went through Comfy servers per day, without addresses. Needed for the monthly allowance.
Link to your Comfy account, if you sign in with Telegram or email: the account ID. Needed to apply your subscription.
IP address — the server sees it, as any website does. At registration only its hash is kept, to prevent mass registrations. The IP address itself is not stored.
Telegram link code — if you sign in with Telegram: single use, valid for 10 minutes.
A mark in the browser's synced storage (storage.sync) — a random string saved in your browser profile. If the extension is reinstalled under the same browser account, the mark shows that the guest allowance was already given, so it is not given again. We store only a hash of the mark. It is not a device fingerprint: it is deleted together with your browser's sync data.
Technical events with the installation ID — for example “connection succeeded” or “banner button pressed”, without site addresses. They help us see what works. Sent only with your consent: the “Help improve Comfy” switch in the extension settings, off by default (in Firefox — the technical data consent in the add-on settings). Without consent the extension does not send them. Versions before 0.6.3 on Chromium-based browsers sent events without a separate consent.
Comfy login and password — only if you sign in with email: sent over an encrypted connection to be checked and not stored in the extension or on our extension server (the Comfy account service checks the password).

Third-party services

Cloudflare Turnstile (if enabled) — a “you are human” check on extension-bridge.com/welcome before the guest allowance is given, run by Cloudflare under its privacy policy; we receive only the result.
api.ipify.org — when checking the connection, the extension asks this service through Comfy servers to show which address sites see. It receives the address of the Comfy server, not yours.

How the data is used

Only to run the extension: give access to the servers, count the allowance, apply the subscription, find and fix connection problems. We do not sell or transfer data to third parties and do not use it for advertising or creditworthiness.

The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Retention

Traffic counters and events are kept as daily totals. Installation data is deleted on request or after 12 months without activity.

Your choices

You can sign out in the extension settings, turn off events, remove the extension, or ask us to delete your installation data.

Support and contact

Write to support in your Comfy account or to the Comfy Telegram bot.