Plain-language privacy policy.
This page covers how we handle personal information across orders, support and the website. The architectural privacy story for the Shield appliance itself is on the threat model page.
Local-first management
WOMBATS Shield is designed around local‑first network management. Filtering decisions and the management dashboard run on the appliance on your network. There is no vendor cloud control plane and no telemetry pipeline back to us by design.
What the appliance does not store
Shield does not maintain a browsing-history report or a behavioural profiling dashboard. AdGuard Home defaults that would have produced these have been disabled or restricted in our build.
What the website handles
When you place an order or contact support, we collect the information you provide, name, email, shipping address, order reference, and any details you include in your message, in order to process the order or respond to you.
Payments are processed by Stripe. We don't see or store your card details. Stripe sends a payment confirmation directly.
What we don't do
We don't sell your information. We don't share it with marketing partners. We don't use it to build a profile of you. We don't run a marketing mailing list.
External services we rely on
The website uses standard web infrastructure for hosting, email and payments. The Shield appliance reaches out to fetch filter list updates, software bundle updates, and upstream DNS resolution. Where Follow-Me Filtering uses our relay (see below), the Shield also holds open an encrypted connection to it. None of those flows include personally identifying data we collect.
Follow-Me Filtering and our relay
Follow-Me Filtering (Shield Vault) connects a child's phone back to the Shield in your own home. In most homes the phone reaches your Shield directly, and nothing passes through us at all.
Some internet connections cannot accept incoming connections, including Starlink, mobile broadband, hotel Wi-Fi and a few providers. For those homes, your child's phone reaches your Shield through a WOMBATS relay server located in Australia (hosted with BinaryLane, Melbourne). The relay only passes along data that is already end-to-end encrypted between the phone and your own Shield, so WOMBATS cannot read your family's browsing. The relay can see only a phone's internet (IP) address and when it is connected, which we do not log or use for profiling. Your family's browsing history never leaves your own Shield.
Australian Privacy Principles
We handle personal information in line with the Australian Privacy Principles. If you have a privacy question or want to access or correct the personal information we hold about you, contact support@wombatss.com.
Changes
We'll update this page if our practices change. The version you see is current as of the date below. We don't use opaque, undated “privacy updates” for material changes.
