This Privacy Policy (the "Policy") describes what data the Service collects, how it is used, stored and protected.
By using the Service, the User agrees to the terms of this Policy in full.
Registration data: username (login), display nickname, email address (if provided), password hash.
Technical logs: IP address, browser data (User-Agent), date and time of sign-in, actions within the Service. The User explicitly agrees that the Service stores such logs to ensure security, prevent abuse and perform technical diagnostics.
Payment data: transaction identifiers, amounts, payment method, payment status. The Service does not collect or store bank card data — payment processing is performed by payment providers.
Subscription data: validity periods, traffic volumes, identifiers in external VPN management systems.
Cookies and session data required for authentication and interface operation.
Providing and maintaining access to the Service and subscriptions.
Security: protection against brute-force attacks, fraud, unauthorized access.
Payment accounting, balance and referral bonus crediting.
Technical diagnostics, troubleshooting, improvement of the Service.
Compliance with legal requirements and payment provider rules.
The User consents to the storage of technical logs (including IP addresses and activity history) for the period necessary for the purposes listed in section 3.
Security logs (sign-ins, administrative actions) are stored for up to 12 months, unless a longer period is required by law or incident investigation.
Payment records are retained for the period required by payment systems and accounting rules.
Account data is stored until the account is deleted by the User or the Administration.
Data is transferred to third parties only to the extent necessary for the operation of the Service: payment providers (to process payments), the VPN infrastructure management system (to provide access), the hosting provider.
The Service does not sell or transfer personal data to third parties for marketing purposes.
Data may be disclosed upon a lawful request of competent authorities.
Due to the intangible nature of digital services, refunds are not issued after access to the service has been granted.
Exception: the service was not provided due to a technical fault of the Service, or access was not actually granted. In such cases, contact support within 24 hours of payment.
Initiating a chargeback through a payment system without contacting support first is a violation of the Service terms and may result in account suspension.
Passwords are stored as cryptographic hashes (bcrypt); two-factor authentication secrets are stored in encrypted form.
Data transmission is protected by TLS encryption (HTTPS).
Access to data is restricted, and actions of administrators and moderators are logged.
Despite the measures taken, the Administration does not guarantee absolute data security and is not liable for the consequences of force majeure.
The User may request via support: correction of their data, deletion of the account and related data (except records that the Service is required to retain by law or for payment accounting purposes).
The User may withdraw consent to data processing by discontinuing the use of the Service.
The Administration may amend this Policy. The current version is published in the Service.
Continued use of the Service after changes means acceptance of the new version.
For data processing questions, contact support via the "Support" section in the Service account.