Privacy policy

For the “Nebula Network” Chrome extension. Updated 4 August 2026.

Nebula Network is a client that connects your browser to an exit node belonging to your organization. It is not a public VPN service, it collects nothing for advertising, and it passes nothing to third parties for marketing.

What you enter

To use the extension you provide either an access token, or the server address, port, username and password. The selected mode and your domain list are saved alongside them.

All of these values are stored locally in your browser through chrome.storage. They are not uploaded to third-party servers and are not synchronised between devices.

Device identifier

The first time you sign in with a token, the extension generates a random device identifier and stores it locally. It is sent together with the token to your organization's server so that the per-token device limit can be enforced and access can be revoked. The identifier contains nothing about you, your hardware or your activity.

Where network requests go

Your organization's server — contacted to validate the token, obtain the connection parameters, and periodically confirm that the access is still valid and the exit node is alive. The token and the device identifier are sent.
The IP lookup service ipwho.is — after connecting, the extension queries it to show you which external IP address you received. As with any web request, that service sees the address the request came from; its own privacy policy is available at ipwho.is. No credentials, visited page addresses or device identifier are sent there.

Your traffic

While the connection is on, browser traffic is routed through your organization's exit node — either entirely, or only for the domains you specified, depending on the mode. That is the purpose of the extension. This traffic passes through equipment your organization operates, so its own rules apply to it. The extension itself keeps no log of visited sites, stores no page content and sends none anywhere.

What the extension does not do

It does not collect or transmit browsing history or page content.
It contains no advertising, trackers or analytics.
It does not sell or transfer data to third parties.
It does not use data for anything unrelated to running the connection.

Deleting your data

Your data lives only in your browser. To remove it, clear the fields in the extension window or uninstall the extension — its local storage is removed with it. To revoke access on the server side, contact the administrator who issued your token.

Permissions and why they are needed

Proxy control — the core function: configuring the browser to connect through your exit node.
Site access — so domain rules apply in every tab and the connection status indicator can be shown.
Request authentication — so the proxy username and password are supplied automatically, without a native password dialog.
Storage — so your settings are kept locally.
Periodic tasks — a regular check that the node is reachable, which the IP leak protection depends on.

Questions

Access to Nebula Network is issued by your organization's administrator — please direct questions about your account, your token and usage rules to them.