লগইন

Privacy Policy

Effective August 19, 2026

Types of information we collect online

We never sell your personal information. We do use some cookies and tools to measure the success of our Meta (Facebook) advertising, which are detailed below in full transparency.

Account Information

Name, mobile number, email address, and your password. Your password is encrypted using bcrypt upon registration, so we cannot read or view your original password.

Payment Information

The phone number used for the transaction, the TrxID (Transaction Reference), the amount paid, and your selected plan. We do not collect credit card or direct bank account numbers. You send funds directly to our designated bKash or Nagad numbers, and we verify the payment using your provided TrxID.

DNS and Usage Data

We track requests made from your profiles, including allowed and blocked domains and the time of request. This log is necessary to provide you with dashboard statistics, weekly reports, and to allow the filtering functionalities to work natively.

Visitor Analytics

When you visit our website, our servers securely process:

  • Randomized visitor and session IDs (stored strictly on your browser).
  • Visited pages, referrers, and advertising UTM tags.
  • Your IP address to determine the country and region, as well as your ISP.
  • Browser, operating system, device type, screen resolution, language, and timezone.

How we use your information

  • To create, manage, and maintain your account securely.
  • To operate our DNS filtering service and customize your profiles.
  • To verify your payments and activate your subscriptions.
  • To send mandatory service notifications and weekly analytics reports.
  • To provide customer support via WhatsApp or email.
  • To analyze advertising campaign effectiveness and improve marketing strategies.

Cookies and Browser Storage

Our website utilizes cookies and local storage tokens, including:

  • Session Cookies — Critical for keeping you logged in. The site requires these to function correctly.
  • _fbp — A browser identifier formatted for Meta, kept for 90 days. Issued by ChayaNetwork natively.
  • _fbc — Click identifier if you visit our site from a Facebook or Instagram ad. Kept for 90 days.
  • Visitor & Session IDs — Randomized tokens placed in your browser's localStorage and sessionStorage to distinguish distinct page views efficiently.

Information we share with Meta

We utilize the Conversions API provided by Meta via Cloudflare Zaraz to evaluate our ad performance. This mechanism acts securely server-to-server; no Meta scripts are executed directly on your browser.

Information sent to Meta may include:

  • Specific actions such as page views or completing a registration.
  • The _fbp and _fbc identifiers mentioned above.
  • SHA-256 Hashes of your email, mobile number, name, or customer ID. Your actual data is irreversibly encrypted and never dispatched to Meta directly.

DNS Logs Policy

  • Logs indicate domains requested and whether they were allowed or blocked.
  • We do not have access to, analyze, or keep the internal content of web pages or applications you access. DNS only handles address matching.
  • Historical DNS logs are automatically purged after a maximum of 30 days.
  • These logs are strictly private and not shared with third-party networks.

Information Sharing

We do not sell or rent your personal information. Under essential operations, some information might transverse the following platforms:

  • Meta Platforms — Solely for analyzing ads as described in section 4.
  • Cloudflare — Provides our infrastructure. Regular IP data and browser statistics route through their edge nodes.
  • Communication Services — OTPs and mandatory notifications pass through encrypted channels of our designated SMS/Email gateways.
  • Legal Obligations — When compelled by enforceable laws within the jurisdiction of Bangladesh.

Data Security

  • All communication to and from our services is encrypted via SSL/TLS.
  • Passwords remain hashed securely via bcrypt.
  • DNS Traffic is fortified with DoT/DoH encryption protecting it from interception.
  • The operational infrastructure is shielded by Cloudflare Enterprise.

We will never ask for your password or OTP via phone, SMS, email, or WhatsApp. If anyone claiming to be from ChayaNetwork requests such information, do not share it, and report it to us immediately.

Children's Privacy

Accounts are exclusive to individuals aged 18 and older. Children do not have standalone accounts. Dependent profiles are exclusively managed by the parent's administration portal, without mandating the real name of the child.

Your Rights

At any given point, you have the right to request:

  • An export containing the copy of your personal data on record.
  • Rectification of imprecise information.
  • Complete deletion of your account and connected usage data.
  • Exclusion from marketing communications.

Any adjustments to this policy will be communicated via email or through the dashboard. Significant updates will be highlighted at least 7 days prior to coming into effect.

Contact Us