Last updated 6 November 2026

Privacy, in plain words.

Pipe is a network toolbox published at yux.co. You do not need an account to use it. This policy covers the Pipe app, getpipe.today and the Pipe Pro license service. For privacy questions or requests, write to support@yux.co.

Your traffic and profiles

Pipe processes your network traffic on your device and sends it according to the profile you choose. Traffic is sent directly or through the proxy, DNS and other servers you configure. Those services receive the information needed to carry the connection and have their own privacy policies. Pipe does not route your traffic through a network operated by us.

Profiles, proxy credentials, connection history, logs and any HTTP capture you enable are kept on your device. HTTPS inspection, when you enable it and trust its certificate, can expose sensitive content inside the app. Your scripts and remote profile or module sources can make network requests according to your configuration. Review them before using them. We do not receive unencrypted profiles, traffic contents, browsing history or captures unless you choose to send them to support or another service.

Devices using the same Pro key can automatically sync saved profiles, proxy credentials, subscriptions, modules and their local files. The app encrypts this collection before uploading it to our Cloudflare service. The service cannot decrypt the collection and does not receive its names or contents in plaintext. It sees the license and authenticated device, vault identifier, revision, encrypted size and update time. Connection state, device preferences, browsing history and captures are not synced. The encrypted collection is retained when Pro expires, so it remains available if Pro is renewed; you may contact support to request deletion.

Device backups and any files you export are handled by your device, backup provider and the destinations you choose. Before sharing a profile, log or capture, check it for credentials and private information.

Your network’s country

The built-in profile sends sites in the country of the network you are on directly. To know that country, Pipe makes one HTTPS request from your device to Cloudflare’s trace endpoint when it connects and when your network changes, and reads the country from the answer. Nothing else is sent: no key, device identifier, profile, list of sites or traffic. Like any website, Cloudflare sees the request come from your public IP address. The country stays on your device. If you set the country yourself, Pipe uses yours instead; if you turn off Network Lookups in Settings, Pipe makes no such request and uses your device’s region setting.

To show each of your proxy servers’ country, Pipe asks Cloudflare’s trace endpoint once through each server, while Pipe runs and Network Lookups are on. Cloudflare sees the request come from that server’s address; Pipe keeps only the country, on your device, and asks again only if the server changes. With Network Lookups off, Pipe makes no such request and reads the country from the server’s name.

The website

Cloudflare hosts the website and license service. It processes connection information, including your IP address and approximate location, to deliver and protect them. The address lookup on the home page displays the connection information Cloudflare provides for that request; our application does not store that lookup.

We never sell your traffic or browsing data, and do not use it for advertising or tracking. We do not add advertising or visitor analytics to this website. We read the page totals Cloudflare already counts, and links we share in campaigns count their clicks; neither records who you are. A purchase made after following such a link remembers the link's name. Checkout uses this tab’s session storage to remember your Pro key, its private operation ID and the hosted payment page, so it can show how the payment went after you return. It does not store your billing email there. Use “Close this checkout” to clear it; closing the tab normally ends the session, although your browser may restore sessions. Stored checkouts expire after seven days. If you choose a language from the site’s language menu, a cookie named lang keeps that choice for a year so the site opens in it; it holds only the language. If you switch between light and dark, your browser’s storage keeps that choice; it never leaves your device. Billing management happens in Creem’s customer portal, under Creem’s privacy policy.

Pipe Pro

A Pro key takes the place of an account. The license service keeps:

Your key’s identifier and replacement history. A Pro key is made on your device and never reaches the service. The service receives only an authentication credential derived from the key, works out the identifier from it, and keeps nothing else of the key. It cannot recover your Pro key or the profile encryption key.
Random device identifiers, platform, optional device names, activation and deactivation times, and the time a token was refreshed, to enforce the 10-device limit. Where the app makes a device key, the public half of it, so that a device's access works only on that device; the private half never leaves the device.
Store and payment identifiers, product and paid-period information, price, currency, refunds, chargebacks and billing grace periods, to provide the access you bought and prevent fraud.
For web purchases, the order identifier, and a hash and an encrypted copy of the secret receipt.
For website subscriptions, Creem’s customer, subscription and payment references, their status, the paid periods, and the hash of a checkout’s private operation ID. Your name, email, address and card stay with Creem, the seller; we never store them.

Keys are secrets. Anyone holding a Pro key can use its access and manage its devices; a key never opens payments or billing, which Creem’s portal guards with your email. Do not send keys to support; give the order number instead.

Pipe’s Telegram groups are run by Telegram under Telegram’s privacy policy. To keep out automated accounts, our bot asks people who want to join the Pipe group to press a button; it keeps nothing about them. The Pipe Pro group is for Pro: if you open it from the app, the bot keeps your Telegram user ID and the license it came with, so it can let you in. It forgets them when Pro on that license ends, which also removes you from the Pipe Pro group, or at once when you send it /forget. The app never sends your key, and the bot never learns it.

Payments and billing emails

Where a supported purchase channel is available, its app store processes store purchases, and Creem sells website subscriptions as the merchant of record on its hosted payment page. We receive purchase status and identifiers; we do not receive your full card number or card security code. When you continue to web payment, you leave this website for Creem’s page, which processes technical and payment information under its privacy policy.

For website subscriptions, Creem collects the payer’s email, name and billing details needed for payments and tax under its own policy, and its customer portal keeps the card and invoices. Pipe can send a single-use billing recovery link to the email Creem holds; following the link verifies control of that mailbox. Pipe does not require separate account registration or a phone number. Email delivery providers process recovery messages. Providers may retain payment information under their own policies.

Retention, security and your choices

We retain license and purchase records to verify purchases, handle refunds and disputes, prevent misuse and meet accounting or legal obligations. These records are not automatically erased when a subscription expires. Device seats can be deactivated in the app. Replacing a key stops the old key working, removes every device using it and deletes its encrypted profile collection; devices that hold the profiles upload them again once given the new key. Keep your Pro key: purchase recovery can move a purchase to a new key, but cannot recover the old one or decrypt the stored collection if every copy of the key is lost.

The service uses encrypted connections, hashed receipts, signed device tokens and rate limits. Diagnostic server logs can contain order or device identifiers and error details; application code does not deliberately log your key, receipt secret or payment credentials. No system can guarantee absolute security.

Cloudflare, Apple, Google, Creem and your chosen network services may process data in countries other than yours. Contact support@yux.co to request access, correction or deletion of information we hold, or to ask about your rights. We may need proof of the purchase or key ownership; we cannot identify a license by an email address we have already removed. Some purchase records may need to be retained for legal obligations.

Support and changes

If you email support, we receive your email address and the information you send. We use it to answer and resolve your request. Share only the information needed, and remove secrets from attachments.

We update this page when our practices change. The date above identifies the current policy. Material changes will be described here or in the app.