What Litora stores about you

The one-sentence version: we do not log the sites you visit or the names your device looks up. Here is the rest, in both directions.

Never collected:

Traffic destinations and DNS queries — the gateways' resolvers run with query logging off, and destinations are not recorded anywhere.
Your private key — generated in your browser, never sent to us.
Your email — nothing asks for one.
Payment methods or wallet keys — Telegram and the invoice page handle payment on their own systems.
National identity numbers — a processor once demanded them; we withdrew the processor and kept the principle.

Stored, because the service cannot run without it:

Your sign-in identity: a Telegram user ID, or the subject Google or Apple asserts. No password exists.
Your devices' public keys and when each was created or revoked.
Session placements — which gateway, until when. Sessions expire in 30 days and expired records are swept.
Bytes moved per account — totals, not contents; allowances would otherwise mean nothing.
Purchase records — what was bought, on which rail, quoted versus settled.

The privacy policy carries the same list with retention periods. No third party has audited any of this, and we do not claim otherwise — the list is checkable against how the system visibly behaves, which is the strongest claim we can honestly make today.