privacy policy changed and gitignore updated

.gitignore

@@ -1,36 +1,22 @@
-# Miscellaneous
-*.class
-*.log
-*.pyc
+# =============================================================================
+#  ReVoltVPN — .gitignore
+# =============================================================================
+
+# ── OS & Editor ────────────────────────────────────────────────────────────
 *.swp
 .DS_Store
 .atom/
-.buildlog/
 .history
 .svn/
 .java-version
-
-# IntelliJ related
-*.iml
-*.ipr
-*.iws
 .idea/
-
-# The .vscode folder contains configure files for the Visual Studio Code
 .vscode/
 
-# Python cache & User files
-TECHNICAL_DEBT.md
-RUNNING.md
+# ── Python ─────────────────────────────────────────────────────────────────
 __pycache__/
 *.pyc
 
-# App Config (Hide real IPs/IDs from GitHub)
-lib/logic/app_config.dart
-
-# Flutter/Dart/Pub related
-**/doc/api/
-**/ios/Flutter/.last_build_id
+# ── Flutter / Dart ─────────────────────────────────────────────────────────
 .dart_tool/
 .flutter-plugins
 .flutter-plugins-dependencies
@@ -41,8 +27,10 @@ build/
 local_packages/*/build/
 local_packages/*/.dart_tool/
 *.dart_tool/
+**/doc/api/
+**/ios/Flutter/.last_build_id
 
-# Android related
+# ── Android ────────────────────────────────────────────────────────────────
 **/android/**/gradle-wrapper.jar
 **/android/.gradle
 **/android/captures/
@@ -53,49 +41,61 @@ local_packages/*/.dart_tool/
 **/android/app/src/main/java/io/flutter/plugins/GeneratedPluginRegistrant.java
 **/android/.cxx/
 **/android/app/build/
-
-# Keystore files
-*.keystore
-*.jks
-
-# Crashlytics cache
 **/android/app/crashlytics-build.properties
 
-# Shell scripts (dev only, not for public)
-server_picture.sh
-XRAY_CONFIG_REFERENCE.md
-
-# Secrets
+# ── Secrets & Keystores ───────────────────────────────────────────────────
+*.keystore
+*.jks
 android/key.properties
 android/admob.properties
-SECURITY_HARDENING.md
-VLESS_APP_CONTRACT.md
-AGENTS.md
-SERVER_NOTES.md
-lib/logic/backup/
-00-FULL-REPORT.md
-server full picture.txt
-technical_debt_*.md
-server_full_picture_2.txt
-hivemind_backup.py
-UI_POSITIONING.md
-SERVER_SETUP.md
-REALITY_MIGRATION_PLAN.md
-xray_config_reality.json
-SERVER_DEPLOYMENT.md
+
+# App config (contains real IPs/IDs — use example as template)
+lib/logic/app_config.dart
+
+# ── Hivemind server (deployed separately, not part of the Flutter repo) ───
+hivemind/
+server_hivemind_5_0.py
 swarm_watch.py
 nginx_hivemind_reality.conf
+xray_config_reality.json
+swarm_total.json
 
-# Hivemind server package (deployed separately)
-hivemind/
+# ── Internal docs (not for public repo) ────────────────────────────────────
+AGENTS.md
+RUNNING.md
+SERVER_DEPLOYMENT.md
+SERVER_NOTES.md
+SERVER_SETUP.md
+REALITY_MIGRATION_PLAN.md
+SECURITY_HARDENING.md
+VLESS_APP_CONTRACT.md
+UI_POSITIONING.md
 
-# Thin entry point (imports from hivemind/)
-server_hivemind_5_0.py
-devtools_options.yaml
-.codewhale/state/subagents.v1.lock
+# ── Technical debt & security audits ───────────────────────────────────────
+technical_debt_*.md
+technical_debt_*_answer.md
 
-#ai
+# ── Backups & reference files ──────────────────────────────────────────────
+backups/
+backup/
+hivemind_backup.py
+server full picture.txt
+server_full_picture_2.txt
+00-FULL-REPORT.md
+XRAY_CONFIG_REFERENCE.md
+
+# ── Logs & temp ────────────────────────────────────────────────────────────
+*.log
+*.class
+server_picture.sh
+
+# ── AI assistant ───────────────────────────────────────────────────────────
 .codewhale/
 
-#backup for files i might use later
-backup/
+# ── Dev tool config ────────────────────────────────────────────────────────
+devtools_options.yaml
+lib/logic/backup/
+scraped
+scraped.zip
+hivemind.zip
+XRAY_AUDIT.md

PRIVACY_POLICY.md

@@ -1,21 +1,34 @@
-Privacy Policy
-Last updated: July 2025
+# Privacy Policy
+
+**Last updated:** August 2026
+
 ReVoltVPN is a free VPN service built and operated by ReVolt Team.
-What we collect
+
+## What we collect
+
 We collect the minimum required to operate the service:
 
-A randomly generated device ID created on your phone. This is not linked to your identity in any way.
-Your active session status and data usage for the current session only. Sessions last up to 1 hour, then expire. All session data is stored in memory and deleted permanently when your session ends.
+- A randomly generated device ID created on your phone. This is not linked to your identity in any way.
+- Your active session status and data usage for the current session only. Sessions last up to 1 hour, then expire. Session data is stored in memory and deleted when your session ends.
 
-What we do not collect
+## Operational logs
 
-We do not collect your name, email, or any personal information.
-We do not log your internet traffic or browsing history.
-We do not sell or share any data with third parties.
+We keep a short in-memory log buffer (last 200 lines) for debugging and server health monitoring. These logs include truncated device IDs (first 8 characters only), session start/stop events, and error messages. Logs never leave the server, are not retained after a server restart, and are only accessible to the server operator via local console. We also maintain an aggregate total of all data ever transferred (in GB) for capacity planning — this counter is not tied to any individual device.
+
+## What we do not collect
+
+- We do not collect your name, email, or any personal information.
+- We do not log your internet traffic or browsing history.
+- We do not sell or share any data with third parties.
+
+## Ads & Consent
 
-Ads & Consent
 ReVoltVPN uses Google AdMob to display rewarded video ads. On first launch, users in the European Economic Area (EEA) and United Kingdom are shown a consent dialog (provided by Google's User Messaging Platform) that lets them choose whether to allow personalized ads. This consent choice is stored on your device and can be changed at any time by reinstalling the app. Google may collect data as part of ad delivery. Please refer to Google's Privacy Policy for details.
-Your traffic
-Your internet traffic is routed through our server located in Finland. We do not inspect, log, or store your traffic.
-Contact
-If you have any questions, open an issue on the GitHub repository.
+
+## Your traffic
+
+Your internet traffic is routed through our server located in Finland. We do not inspect, log, or store your traffic. We only track total bytes transferred per session (for quota enforcement and blocking abusers) — no packet contents, no destination IPs, no DNS queries.
+
+## Contact
+
+If you have any questions, open an issue on the GitHub repository or join the Discord server.