Privacy Policy

Last updated: 15 June 2026

This Privacy Policy explains what personal data the vpn.how service ("vpn.how", "we", "us") processes when you visit our website or use our VPN servers, why we process it, and the rights you have. By creating an account or using the Service you confirm that you have read this Policy. If you do not agree with it, please do not use the Service.

1. Our privacy principles

  • We collect only the data we genuinely need to run the Service and to bill it.
  • We do not monitor, record, or store what you do through the VPN.
  • We never sell, rent, or trade your personal data.

2. VPN traffic and our no-logs commitment

We do not inspect, record, or retain the contents of your traffic, your browsing history, the websites or IP addresses you visit, or your DNS queries. We do not build profiles of your online activity.

Because we provide a personal VPN server, your traffic necessarily passes through the server you rent. Our policy is not to log or analyse that traffic. To operate the server, we do store the technical data needed to run it, as described in section 3.

3. What data we collect, why, and on what basis

Account data. Your email address and a hashed password, so we can create and protect your account and contact you about the Service. Basis: performance of our contract with you.

VPN server data. The authentication credentials, keys, configuration, and chosen location of the personal server you order, so we can set it up and operate it for you. Basis: performance of our contract.

Billing data. Your account balance and a record of orders, top-ups, and charges, so we can manage payments and meet accounting obligations. Basis: contract and legal obligation.

Payment data. Payments are handled by external payment providers. We do not receive or store your full card number. We receive only payment metadata such as amount, currency, date, method, and status. Basis: contract.

Technical data. When you use the website we process your IP address, browser, and device information for security and to deliver the site. Basis: our legitimate interest in a secure, working service.

Website analytics. With your consent we use Yandex Metrica and Google Analytics on our website to understand how it is used and to improve it. Basis: consent.

Support data. If you contact us by email or Telegram, we keep that correspondence so we can answer you and improve our support. Basis: legitimate interest.

Communications. We send service messages that are necessary to operate your account. We send marketing messages only if you have opted in, and you can unsubscribe at any time.

4. Cookies and similar technologies

We use essential cookies that are required to sign you in and keep your session secure. With your consent we also use analytics cookies (Yandex Metrica, Google Analytics). You can accept or decline non-essential cookies in the consent banner, and you can manage or delete cookies in your browser settings.

5. How long we keep data

  • Account and VPN server data: while your account is active, and for a short period afterwards to handle deletion and possible disputes.
  • Server credentials and configuration: while the rented server is active and for a short period after it expires.
  • Billing and payment records: for as long as accounting and tax rules require.
  • Support correspondence: for a limited period after your request is resolved.
  • Analytics data: according to the settings and policies of the analytics providers.

We do not keep your VPN traffic or browsing activity, because we do not record it.

6. Who we share data with

We share personal data only with service providers who help us run the Service, and only to the extent they need it:

  • Payment providers — to process your payments.
  • Hosting and server providers — who operate the physical infrastructure on which your VPN server runs.
  • Analytics providers — Yandex Metrica and Google Analytics, for website statistics.
  • Cloudflare — as a content delivery and security layer for our website.
  • Telegram — if you choose to contact us or use our channel; Telegram acts under its own privacy policy.

These providers are required to use your data only on our instructions, and none of them receive the contents of your VPN traffic. We may also disclose data where the law requires us to.

7. International data transfers

Our providers may be located in different countries, so your data may be processed outside your country of residence. Where this happens, we rely on appropriate safeguards to protect your data.

8. Your rights

Subject to applicable law, you can ask us to: access the data we hold about you; correct it; delete it; restrict or object to its processing; receive it in a portable format; and withdraw your consent at any time. You also have the right to lodge a complaint with your data protection supervisory authority.

To exercise any of these rights, contact us at a@vpn.how. We may need to verify your identity before we act on your request.

9. Data security

We protect your data with encryption in transit (HTTPS for the website and encryption for VPN connections), hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to keep what we collect to a minimum.

10. Children

The Service is not intended for children. We do not knowingly collect personal data from children. If you believe that a child has provided us with data, please contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. The date at the top shows when it was last changed. If we make a significant change, we will take reasonable steps to inform you.

12. Contact us

If you have any questions about this Policy or about your data, contact us at a@vpn.how.