HatchPrivacy policy
Effective October 15, 2026
Hatch VPN ("Hatch") is made by Obscura Labs LLC ("we", "us"). Hatch is built to know as little about you as possible. There are no accounts: you never give us your name, email address or password. This policy explains the little we do keep and why.
What we keep
A random device ID
The app creates a random identifier on your device and stores it in the device's keychain. It isn't derived from your hardware, your Apple Account or anything else about you. We use it to link your device to your subscription and to give your device its VPN configuration. Along with it we keep the type of device (iPhone, iPad or Mac) and the day it last connected, which we use to apply the device limit.
Your subscription status
When you subscribe, Apple gives the app a signed record of the purchase, which the app sends to us. From it we keep the subscription's transaction ID, the plan, whether you're in a free trial, its status and its expiry date. Apple processes your payment; we never see your name, Apple Account or card details.
App integrity check
On iPhone and iPad, the app uses Apple's App Attest service to prove that requests come from the genuine Hatch app. We keep the public key that App Attest creates for your device.
Your VPN configuration
Each device is given a WireGuard key pair and a private address inside our network. These are needed to set up the tunnel and are replaced regularly.
Server load
We measure total bandwidth and load per server, so we know when to add capacity. These figures are not broken down by user or device.
What we don't keep
- The websites and apps you use, and the content of your traffic.
- Your DNS lookups, including those checked by Hatch's ad blocker.
- Your IP address, and the times you connect or disconnect.
While you are connected, our servers necessarily handle your IP address and your traffic in memory in order to route it. They don't write it to logs or keep it after the connection ends. Our technical error logs are kept for at most 7 days and contain none of the above.
No ads, no tracking
Hatch contains no analytics, advertising or tracking SDKs. We don't sell or rent any data, and we don't share it with advertisers or data brokers.
Who else is involved
- Apple handles purchases, subscriptions and App Attest, under Apple's privacy policy.
- Hosting providers, such as Amazon Web Services, Hetzner and OVHcloud, run our servers in several countries. They process data only on our behalf.
If we receive a valid legal request, we can only provide what this policy says we keep. We can't provide browsing activity or connection logs, because we don't have them.
How long we keep it
Device and subscription records are kept while you use Hatch, and for as long as we need them for accounting or legal obligations afterwards. VPN configurations expire on their own. You can ask us to delete the records tied to your device at any time by contacting support.
Your rights
Depending on where you live (for example under the GDPR or the California Consumer Privacy Act), you may have the right to access, correct or delete your data, or to object to how we use it. Because we don't know who you are, we may need you to send us details from the app so we can find your device's records. Contact us at the address below and we'll respond within 30 days.
Children
Hatch is not directed at children under 13, and we don't knowingly collect data from them.
Changes
If we change this policy, we'll update the date at the top. If a change affects what we collect, we'll also tell you in the app before it takes effect.
Contact
Obscura Labs LLC
support@hatchvpn.com