GUARDIANAYour data, under your control
EN
Start

TERMS OF USE · 2 NOVEMBER 2026

Clear terms for using GUARDIANA.

GUARDIANA is a program for Windows 10 and 11 that includes the services of this website: NÚCLEO, the ZERO browser (demonstration version), Orbit, Communications, the X-rays and the Fines. Those services can also be used from a browser. Neither the program nor the services ask for an account. Today they are free: nothing is charged.

1. What it is

NÚCLEO is the entry point: it guides you to what you need. The ZERO browser opens each website in a remote bubble and shows you who it connects to, so that you can decide what to cut. Orbit is a map of the internet’s infrastructure: cables, data centres and satellites. Communications is for sending messages, voice notes and files, and for making calls, end-to-end encrypted between two browsers. The X-rays and the Fines are reports and cases, each with its source and date.

Today nothing is charged: there are no paid plans, no subscriptions and no payment details to give. The program for Windows includes a 7-day trial with every feature; after that it keeps working free at the GUARDIANA Free level, and the full features will need the subscription, which cannot be purchased yet. If there is ever a paid service, these terms will say so beforehand, with its price and its date, and nobody will start paying without choosing to.

2. What it does not promise

3. Permitted use

Use GUARDIANA for lawful purposes. Do not use it to attack, overload or test third-party systems without permission, to send illegal content or to impersonate another person. ZERO always blocks known dangerous websites and internal addresses, and GUARDIANA may cut off access to ZERO or to Communications for anyone who abuses them, for example through massive automated use.

4. Your part

What you do and what you send with GUARDIANA is your responsibility. In Communications, compare the safety number with the other person through another channel before sending anything sensitive: that is what proves that nobody has got in the middle. Encryption does not protect a device or a browser that is already compromised, nor does it prevent the recipient from keeping copies.

5. Open source

The code of this website is published under the GNU AGPL-3.0 licence at github.com/guardianagroup/guardianagroup.com: anyone can read it and check that it does what we say. The code licence does not grant the right to use the GUARDIANA name or its logos.

6. Data and sources for Orbit, ZERO, Communications and the X-rays

The world data that Orbit shows (submarine and terrestrial cables, data centres, satellites, borders and the map) is taken from public, verifiable sources and checked again before publication; when a piece of data is approximate or may be missing, the screen itself says so. Acknowledgements required by their licences: cables, stations, data centres and the coastline when zooming far into the map © OpenStreetMap contributors (ODbL) and Wikidata (CC0); satellite orbital elements from CelesTrak, with positions calculated on your device; borders, the coastline when zooming into the map, region names and the cities that appear when zooming into the map, from Natural Earth (public domain; “Made with Natural Earth”); names of cities next to cables and data centres, from GeoNames (CC BY 4.0); images of the Earth from NASA (public domain); seabed and land relief from ETOPO 2022, NOAA NCEI (public domain); overland fibre routes from The Internet Topology Zoo (CC BY 4.0) and from other public records cited in the project’s data register. Data about your device is measured in your browser; the measurements that query other companies (“Measure from outside” and “Measure routes”), only when you press them, are explained in the Privacy policy. The PDF report of “The journey of your data” is also put together on your device, with html2canvas (Niklas von Hertzen, MIT licence). Orbit’s typefaces (Instrument Serif, Schibsted Grotesk, Hanken Grotesk and IBM Plex Mono) are served from this same site under their licence, the SIL Open Font License 1.1. “With / Without GUARDIANA” shows a measurement of our own: on 23 October 2026, the home pages of eleven sports and news dailies were opened from Colombia, in a browser with no blockers and accepting cookies whenever the website asked for them, and every domain of another company that the browser connected to was recorded; the company and the country of its headquarters are published only when at least two independent reviews agree, and the paths, along the map’s cables and satellites, are illustrative: they reach the country of that headquarters and do not indicate the route each piece of data took. “With GUARDIANA” applies GUARDIANA’s rules to that same measurement (advertising, tracking and measurement are cut); it is not a measurement of your device.

ZERO opens each website in a remote GUARDIANA bubble (a Google Chrome browser — or Chromium, BSD licence, if Chrome is not available — driven with Playwright, Apache 2.0 licence). It always stops dangerous websites and shows each website’s advertising, tracking and cookie notices; with Google or Brave it cuts them when the person chooses to, and with Tor it cuts them from the start, together with the advertising, measurement and cookie-notice companies identified in GUARDIANA’s database. It uses public lists that are rebuilt every week from their repositories: EasyList and EasyPrivacy (GPL-3.0 or CC BY-SA 3.0, easylist.to) and the uBlock Origin lists (uAssets: privacy, badware, filters, unbreak, privacy-removeparam, annoyances-cookies and lan-block; GPL-3.0). The company behind each domain and the country of its headquarters come from Wikidata (CC0) and from GUARDIANA’s own database, which publishes only what at least two independent reviews confirm; when it is not known, the screen says “Other company”. What ZERO reports about an ad auction is what the page itself declares (Prebid, the consent notice and the ad server): it always says what is declared and what cannot be known. With Tor, ZERO goes out through the Tor network (The Tor Project, BSD licence) and opens only the regular web: .onion addresses are blocked on the server, except for verified official services (today, Brave’s, with the address that Brave published on its official forum: community.brave.app, “Update: New .onion addresses for Brave website and Brave Search”). With Tor, search is Brave Search through Tor. No website opened in ZERO can connect to the bubble’s server, to private networks or to the provider’s internal data. No filter detects all illegal or dangerous content on the internet. The PDF report is generated in the person’s own browser, with no external libraries, and is not sent to anyone. The record of each session summarises what ZERO did and is sealed by GUARDIANA’s own server with a temporary key that is not kept: it is for your own reference, not evidence before third parties or legal advice.

Communications encrypts in your own browser, with the cryptography built into the browser (Web Crypto) and, for ML-KEM-768, the open library @noble/post-quantum 0.7.1 (MIT licence, by Paul Miller), served from this same site: an ECDSA P-256 and ECDH P-256 identity created on your device, a hybrid session agreement with three ECDH P-256 exchanges and one ML-KEM-768 (FIPS 203), the invitation secret and HKDF-SHA256, and a different AES-256-GCM key for each message and for each file chunk. The invitation is a random 9-digit code valid for 10 minutes and for a single use: the conversation secret is deposited on GUARDIANA’s server, locked with a key derived from the code (PBKDF2-SHA256, 300,000 iterations); the server does not keep it unlocked and limits lookup attempts, and its protection depends on the code, which is why the code expires after 10 minutes and works only once. The server relays encrypted bytes between the two people, keeps no names or keys and only holds, end-to-end encrypted, the messages for someone who is not connected, until they are delivered or for 7 days at most; it does see IP addresses, the room, the times and the traffic volume, like any server: this is not anonymity. Voice notes are recorded in your browser and travel like any other file. What the screen calls the “safety number” is the fingerprint of the two identities: comparing it through another channel is what proves that nobody got in the middle; until then, trust rests on the code. “End” deletes the conversation in your browser and requests its deletion in the other person’s: it does not reach anything already saved to a disk. Received files remain in the browser without encryption of their own. GUARDIANA does not open or analyse the content (it is encrypted), so it does not detect viruses: it checks that each message and each chunk arrives intact and untampered with, and stops the transfer if not. No encryption protects a device, browser or app that is already compromised. In the normal session, the key agreement is post-quantum hybrid (ECDH P-256 + ML-KEM-768), but the identity signatures are still ECDSA P-256, which is not post-quantum; if the other device uses an earlier version, that session is ECDH only and the security log warns about it. Ultra, with the Plus subscription, uses the same library: a new identity in each conversation, only in the page’s memory, with ECDSA P-384, ECDH P-384 and ML-DSA-87 (FIPS 204); a hybrid agreement with three ECDH P-384 exchanges, one ML-KEM-1024 (FIPS 203), the invitation secret and HKDF-SHA-384; and both signatures, the classical one and the post-quantum one, over the whole negotiation and over the integrity of what is sent. Its invitation is a link or a QR code with a 256-bit secret that is not deposited on the server; the safety number can be compared at any time (“Security and verification”); the keys are renewed every 5 minutes and, when the session ends, they are deleted from the page’s memory, although the browser and the system may keep copies that we cannot guarantee will disappear. Voice calls and video calls always go through a GUARDIANA call server (TURN), the one closest to each person (Nuremberg or Miami), which sees the IP addresses, the times and the volume, not the audio or the picture: the call negotiation travels inside the end-to-end encrypted channel, and the audio and picture travel with DTLS-SRTP, the standard encryption for browser calls; in Chrome and Edge a post-quantum layer is added when both devices have it enabled, and the call screen indicates it; that layer takes its key from the chat session with HKDF-SHA-256 and, in Ultra, it is mandatory. In Ultra, voice changing is applied in your browser before sending and changes the pitch and the timbre, not the accent, the words or the way of speaking.

“Did you know…?” and “Why GUARDIANA is the way it is”, in Communications: each fact was checked against at least two public sources, which are cited below (October 2026). The figures are those reported or published by each body or media outlet, not our own estimates:

The “WhatsApp” button in Communications carries the official WhatsApp logo, a trademark of WhatsApp LLC, taken from Meta’s Brand Resource Center and used under its conditions solely to indicate that the button opens WhatsApp. WhatsApp does not sponsor or endorse GUARDIANA.

Photos on Orbit’s cards: they are real photos of each feature, reviewed one by one, from Wikimedia Commons under free licences, and they are served from this same site (no visit requests anything from Wikimedia). Authors and licences:

Oil and gas platforms where a submarine cable ends (North Sea): their position is that of OpenStreetMap (ODbL), and their details (operator, field, year and incoming cable) are confirmed by a second source: Wikipedia or, for the Yme field, Store norske leksikon. The Judy platform (UK sector), which is not in OpenStreetMap, takes its position from helis.com and its details from its operator, Harbour Energy.

Microwave radio links (“Land cables” layer, “Radio links” class): the tower-to-tower trunk chains of countries without fibre between their towns (Greenland, Eritrea, the Falkland Islands (Malvinas), Kiribati, Palau and Tonga) and two low-latency stock-exchange routes (Chicago–New Jersey and London–Frankfurt). Only the sections named by at least two independent public sources are included, such as Tusass, EriTel, the World Bank, the Asian Development Bank, the FCC licences, the study by Bhattacherjee et al. (ACM IMC 2020) and the announcements by McKay Brothers and Quincy Data. The route is approximate: it joins the towns named by the sources, because the position of each tower is not public. The stock-exchange latencies are those published by those sources, with their date.

Submarine cables whose second source is a public document: TMX5 (Telmex press release, 23 September 2025), PENBAL-5 (Spain’s Ministry of Defence and the CNMC), Tiwi Islands Cable (Northern Territory Government, Australia, Digital Territory, 2020) and COGIM 1 and 2 between the Gaspésie and the Îles-de-la-Madeleine (BAPE, 2004, and RICEIM press release of 28 May 2024).

Map names in each language: those of states, provinces and cities, from Natural Earth (public domain), which provides them in 26 languages, and, for the page’s other languages, each place’s labels in Wikidata (CC0); those of the towns where the cables land and of the data centres’ cities, from the alternate names in GeoNames (CC BY 4.0). Where no source has the name in your language, the original is shown.

Company cards (headquarters and address): the address of each headquarters comes from an official register (SEC EDGAR in the United States, SIRENE in France, the global LEI register of GLEIF, the California data broker registry or Companies House in the United Kingdom) or is confirmed by two open sources (Wikidata and OpenStreetMap, ODbL). The small map on the card is a crop of the planet map (NASA Blue Marble, public domain).

6 bis. Sources for the home page

What the home page says about the auction of your data and about the cables was checked, before publication, against these texts:

7. If you bought the desktop program

The GUARDIANA program for Windows and macOS and GUARDIANA ZERO for Windows were on sale until October 2026 and are no longer sold. The program for Windows is downloaded from the “Program for Windows” page; since version 1.0.50 it opens the services of this website in its window, and the ZERO browser used in it is the one in point 6. The new macOS version is coming soon. Those who bought them keep, unchanged, the conditions under which they bought, which are those in points A1 to A6.

A1. What it was

GUARDIANA is an open-source program (GPL‑3.0‑or‑later licence) for Windows and macOS that turns your PC into the DNS guardian of your home. There is one plan, and it covers both programs, GUARDIANA and GUARDIANA ZERO: each one works in full for a 7-day trial, with no card and no account, and after that you need a subscription, monthly or yearly, which you can cancel whenever you like.

What happens if you do not subscribe when the trial ends: GUARDIANA does not switch off. It moves to GUARDIANA Free, for good, and keeps watching this computer with the DNS as it is: the live globe, every program’s DNS with its country, company and category, your blocks and their undo, and the last 24 hours of history. The rest is Plus: the whole history, up to 5 computers, alerts, automatic blocks by category and lists, certificate and rights letters, reports, Home Mode, encrypted communications and GUARDIANA ZERO. If you had Home Mode switched on, the other devices in the house keep getting answers so that nobody is left without internet, but Free does not look at them or record them. What it had already recorded stays whole on your disk and you can export it as CSV, JSON or PDF whenever you like; nothing is deleted, not even years later, and none of it ever reaches us.

It includes GUARDIANA ZERO. The subscription also includes GUARDIANA ZERO, the browser for Windows 10 and 11, which has its own 7-day trial, with no card and separate from GUARDIANA’s: the same key works for both programs. If its trial ends without a subscription, the browser keeps opening pages, but without its protection (it does not cut trackers, advertising or data brokers, does not clean addresses, does not watch your marked data and does not carry out mandates or redactions).

The code is open and will remain so. It is published in full under GPL‑3.0: if you know how to compile it, the program is yours, free, with no time limit and without asking our permission. What is paid for here is the ready-made program — compiled, signed, tested on Windows and macOS, with the lists renewed in each version — and having a person who answers.

A2. What it did not promise

GUARDIANA sees service names. It does not see the content, or which app asked for them on a phone. It acts only on your home Wi‑Fi. It is not an antivirus or parental control. And it does not see what bypasses DNS, such as a VPN or an encrypted DNS of its own. We do not guarantee “total security”, nor protection against anything in particular. The full list of limits is on the website and in the program itself. Using it is your decision and your responsibility, under the terms of the GPL‑3.0 licence.

A3. Purchase and licence

Payment is made to the payment gateway, which acts as merchant of record, issues the invoice and handles taxes. You will receive a licence key by email. The key is personal and covers up to 5 computers: yours, in your home or in several. It cannot be resold. Activating with a key makes one connection to the gateway. After that, the program checks the key again: a subscription, 8 days after activation and then once per payment period (monthly or yearly); a Lifetime licence, 8 days after activation and then every 30 days. If a check cannot be made (no network, or the gateway does not answer), it retries every hour. If the gateway says the subscription has not been paid, Plus switches off (if you pay afterwards, it comes back when you enter the key again). And if a subscription goes 7 days without being checked, counted from the first failed attempt, Plus also switches off: GUARDIANA moves to Free and keeps watching this computer, just as when the trial ends. The program keeps trying every hour and, as soon as a check succeeds, Plus comes back by itself, without entering the key. GUARDIANA ZERO follows the same rules with the same key: if its subscription switches off in this way, the browser keeps opening pages, but without its protection, until a check succeeds. The Lifetime licence does not switch off because it could not be checked (point A4). Every connection is recorded in your ledger. The price depends on the billing country you give when paying; the gateway may decline the payment if that country does not match your means of payment. Plus monthly: US$2.49 in Latin America (Colombia included), €4.49 in Europe, £3.99 in the United Kingdom and US$4.99 in the rest of the world. Plus yearly, 20% less: US$23.90, €43.10, £38.30 or US$47.90. Prices already include any applicable taxes. The program’s 7 trial days are not charged and ask for no card; the subscription is charged when you buy it. A subscription can be cancelled at any time and ends at the end of the period paid for; the price of a period already paid does not change. Cancelling the renewal does not refund the current period, except for what point A5 says about the 30 days. Monthly and yearly have exactly the same features. Plus is a licence to use the program: it is not a stake in the company or a financial product.

What happens to your history when the subscription ends: everything lives on your computer and nothing reaches us. Nothing is deleted, ever, not even years later: the program stops recording, but what was recorded stays where it is. You can export it as CSV, JSON or PDF from the ledger page, or delete it yourself whenever you like.

A4. The Lifetime licence

Since 2 November 2026 it is no longer sold. Whoever bought it before keeps it under the conditions in this point, which still apply to those licences.

Until 18 October 2026 it was sold as the Founder licence. Whoever bought it then is an Original Founder: the licence, its key and everything that follows stay exactly the same.

One payment, no renewal, limited to 1,000 licences worldwide. US$49 in the rest of the world, US$24.50 in Latin America (Colombia included), €44.10 in Europe and £39.20 in the United Kingdom, with any applicable taxes already included. When the 1,000 are sold, it is withdrawn; the number is not increased. It gives access to everything Plus gives, with no monthly or yearly fee.

What “lifetime” means, said plainly: for as long as GUARDIANA exists as a product. We do not promise that the program will last forever, because that is not in our hands and saying so would be a lie; we promise that, while it exists, you do not pay again. If we ever stopped publishing it, the program you have installed will keep working on your computer — it is open source and does not depend on any server of ours — and we would say so on this website, with the date.

What it covers and what it does not: it is personal, covers up to 5 computers of yours, and cannot be resold or transferred. It includes later versions of the program, including 2.0 and GUARDIANA 2 when they are released. It does not expire for lack of a connection: the program checks the key 8 days after activation and then every 30 days (if it cannot, it retries every hour), but it does not switch Plus off because it could not check it, even if the computer stays off for months. The only thing that ends it is a refund: the gateway then stops treating it as valid and the program says so, with the date, on the Licence page. The 30-day no-questions-asked refund in point A5 applies equally to the Lifetime licence.

A5. Refunds

If, within the 30 days following the purchase, GUARDIANA is of no use to you, write to hola@guardianagroup.com with the email address used for the purchase and we will refund the full amount, no questions asked. The refund is processed by the gateway to the same means of payment. You do not need to pay to try it: the 7 trial days ask for no card.

A6. Support and updates

Support by email in Spanish, English and Portuguese. Updates never install themselves: you download them from this website whenever you like. Later versions of the program — including 2.0 (blocking per program, on Windows) and GUARDIANA 2, when they are released — are included in Plus. We do not promise dates: what has been published is in the public ledger.

8. Governing law

These terms are governed by the laws of Colombia, without prejudice to the rights that the law of your country of residence grants you as a consumer (in the European Union, the United Kingdom or Brazil, among others). Responsible party: GUARDIANA GROUP S.A.S. (NIT 902.119.954-6), Torre Empresarial PRODEGI, Carrera 3 # 9-30, 18th floor, Bocagrande, Cartagena de Indias, Colombia. Contact: hola@guardianagroup.com.

9. Changes

If these terms change, they change here, with the date. 28 October 2026: the terms are rewritten for the current website (points 1 to 5), point 6 describes the web services as they work today and the conditions of the desktop program move to point 7, unchanged. That same day, in the afternoon: calls can also go through the Miami server, the one closest to each person (point 6), and the shielded session no longer waits for the safety number to be compared, which becomes optional (point 6). 30 October 2026: the program for Windows can be downloaded from this website again, with a 7-day trial (points 1 and 7); point 6 covers the mailbox for pending messages and the post-quantum layer for calls, and point 6 bis completes the sources for the home page. That same day, in the evening: the headline and the introduction present GUARDIANA as a program for Windows that includes the services of this website, which can also be used from a browser. 31 October 2026: point 7 says that, since version 1.0.50, the program for Windows opens the services of this website and that its ZERO browser is the one in point 6. 2 November 2026: what point 6 called the “shielded session” is now called Ultra, and “Shielded” is the name of the version of Communications that works today; nothing else changes in point 6. That same day: point A4 states that the Lifetime licence is no longer sold; whoever bought it before keeps it under the conditions in that point. 5 November 2026: point 6 describes Ultra as it works today, with the Plus subscription; it names its algorithms one by one, including the HKDF-SHA-256 with which the post-quantum layer of calls takes its key, and describes the voice changing it already has.