Privacy Policy

Scope

This policy applies to the marketing pages on vpnwy.com, the user panel (sign-up, login, plan purchase, subscription retrieval) and the VPNWY client software. It does not apply to third-party websites opened through links on this site or to third-party payment channels, which are covered by their own privacy policies.

Data We Collect and Why

Only the data required to keep the service running is collected, in three categories.

• Account data: signing up requires only a username and password, with no email address. Passwords are stored as irreversible hashes, and neither the server nor operations workflows can restore them to plain text.
• Order and subscription data: plan name, amount, payment method, order time, subscription validity period and traffic usage, used to activate routes, meter traffic, and handle plan upgrades and refunds.
• Visit statistics: page views, referrers, browser and device type, and approximate region, used to judge whether content is effective and to locate page faults. Statistics are viewed in aggregate and are not used to identify specific individuals.

No-Logs Stance and Connection Records

VPNWY does not log which websites users visit, does not record visit duration or the contents of DNS queries, and does not build profiles that could be used to reconstruct browsing behavior. At the connection level, only the minimum records needed for troubleshooting and metering are kept:

• Connection time, exit region, upload and download traffic: used for traffic metering and fault diagnosis; the records contain no destination addresses.
• Route nodes: no browsing records are written on the node side, and nothing is retained at the content level.
• Aggregated traffic statistics: statistics needed for capacity planning are kept in aggregate form, such as total traffic for a region in a given period, and do not point to any specific account.

Note that the policies above cover this service's own routes and systems; browser history on user devices and logs generated by third-party applications are not controlled by this service.

Cookies and Local Storage

This site uses cookies and browser local storage for three purposes only.

• Login state: stores a session token to keep users signed in and save them from entering details again; it expires after logging out or clearing browser data.
• Language preference: records the chosen interface language so the next visit opens directly in that language.
• Visit statistics: distinguishes sessions and pages and counts aggregate visits; the content contains no browsing records.

This site does not use third-party advertising cookies and does not track behavior across sites. Cookies can be cleared or disabled in browser settings; once disabled, login state and language preference cannot be kept, but browsing and purchasing are unaffected.

Payment Processing and Third Parties

• Payments are completed through third-party channels; Alipay, WeChat and USDT are currently supported. Sensitive information such as bank card numbers, account balances and payment passwords is handled on the payment channel side and is neither accessed nor stored by this site.
• The information this site receives from payment channels is limited to the order number, amount, payment status and payment time, used to activate plans, reconcile accounts and process refunds.
• Refunds are returned via the original payment method under the 30-day no-questions-asked refund promise, with no additional payment details required.
• Payment channels may retain transaction records to meet their own compliance requirements; their privacy policies govern those records.

Data Retention, Deletion and Policy Updates

• Account data: kept while the account remains active; after a closure request is submitted, account data is deleted from production systems within 30 days, and backup copies are rolled over afterwards.
• Order records: kept for 3 years after the transaction is completed, in line with payment channel and bookkeeping requirements; only the order number, amount, time and payment status remain.
• Visit statistics: kept in aggregate form for 12 months and cleared automatically when that period ends.
• How to delete: log in to the user panel and submit an account closure or data deletion request through the ticket entry point, stating the scope of data to be deleted; once processing is complete, the data cannot be recovered.
• Policy updates: changes to this policy will be published on this page, with a new update date shown at the top of the page; major changes involving how data is used will be announced in the user panel. Continuing to use the service after a change is taken as acceptance of the updated policy.

Questions about this policy, or requests to access, correct or delete personal data, can be submitted through the ticket entry point in the user panel; the outcome will be answered in the ticket.

Related pages: Terms of Service · Plans and Pricing · Global Routes