Account Information and How It Is Used
No email address is required to create an account; a username and password are all you need. VPNOY does not require an email address during account creation or ask you to provide one later to use a subscription service. The account system processes usernames, information needed to verify passwords, and subscription status for authentication, access management, and account maintenance. Do not include passwords in support tickets or other messages.
When you submit a support ticket, the system processes your issue description, replies, and any attached materials to investigate and respond. Submit only error details that are necessary, and obscure payment credentials, subscription links, and other account information in screenshots. Subscription links function as access credentials and should be protected like passwords.
No-Logs Policy and Connection Data
VPNOY follows a no-logs policy: it does not record which websites users access through international routes, or retain browsing content, destination URLs, or histories that could be used to reconstruct browsing activity. Data on traffic usage needed for subscription billing is account quota data, not a record of browsing content.
Connection handling requires temporary session state. This state is used only while a connection is active and is not retained long-term as a history of individual connections. Technical information needed for troubleshooting, such as error types and route issues, should be minimized. It does not include browsing content or create detailed records linking accounts to destination websites.
Access Analytics and Browser Storage
Visit analytics on the marketing website help assess page views, referral sources, and entry-point clicks, so we can understand whether content is clear and navigation is effective. Analytics are not used to record browsing activity over network routes. Passwords, subscription credentials, and payment details should never be submitted as analytics event data.
Cookies and local storage are used to maintain necessary session state and save login credentials and language preferences. Logging out or clearing site data removes the corresponding state from the browser, but does not delete account or order records on the server. Restricting browser storage may prevent your login state from being maintained. Log out after using a shared device.
Order Records and Third-Party Payments
For each order, VPNOY processes the associated plan, amount, payment status, and transaction reference to activate subscriptions, confirm receipt of payment, handle refunds, and resolve billing disputes. Payment methods include Alipay / WeChat Pay / USDT; the relevant third-party provider handles the payment itself.
Payment providers handle payment information under their own policies. VPNOY does not ask users to provide payment passwords or wallet private keys in support tickets. When verifying an order, submit only the information needed. Please also read the privacy notice when visiting a third-party payment page.
Data Retention and Deletion Requests
Account information is retained while the account is active and for as long as needed to provide the service. Order and support records are retained as required for service delivery, refund verification, dispute handling, and applicable laws. Analytics data is used only for the period needed for analysis, then deleted or de-identified. This policy does not set a single retention period for all data categories.
Log in to the user panel and submit an access, correction, or deletion request through the support ticket portal. Account ownership must be verified before processing; you do not need to submit your password with the request. If you have an active subscription, a pending order, or an unresolved dispute, we will explain the impact of deletion on the service and which records cannot yet be deleted. Residual data in backups is cleared through routine replacement and is not reused for day-to-day service.
Data Sharing and Policy Updates
Data is shared with relevant processors only as needed to deliver the service, provide necessary technical support, verify payments, or comply with applicable laws. Account information is not sold. When external processors are involved, their processing purposes and access to information should be limited. Quantum encryption does not replace the need to protect devices, account passwords, and subscription links.
If there are significant changes to processing purposes, the types of information handled, or user rights, we will update the date on this page and explain the changes on the website or in the user panel. Where a new use requires additional consent, that consent must be obtained first. Questions about this policy or specific data practices can be submitted through a user panel support ticket. Service rules are available in the Terms of Service.