Privacy policy

General provisions

This policy describes the processing of data when using the site and PWA VPluse VPN, Telegram-bot, personal account, payment scenarios, affiliate program and installation pages.

The Service processes only the data necessary to provide access, protect the account, execute payment, support and prevent abuse.

What data is processed

The service can store Telegram ID, username and name from Telegram, confirmed email, stable identifier Yandex ID, selected language, subscription status, history of payment attempts, web-sessions, necessary cookies, gift status, invitations and notification delivery, IP address and technical features of the request to protect against abuse, hash unique device identifier, model and version of the operating system, as well as technical status of access.

The original device identifier is not displayed in your account. It is hashed to prevent counting the same device twice. Support may also use information you provide in a request.

To measure the path from a public page to payment, the service may store an opaque click ID, UTM tags, source name, only hostname referrer, landing page path, approximate country and ASN, and device class.The service does not store the full URL referrer or IP address in the attribution data; IP may be separately and limitedly processed by security tools and server logs.

Why data is needed

The data is needed for issuing subscriptions, accounting for devices without false repeats, accruing affiliate bonuses, processing gifts, inviting and delivering notifications, protecting against repeated invitations and helping users.

Payment identifiers are used to confirm payment, reconcile status and resolve disputes.

Attribution data is used to aggregate sources: transitions started by checkouts and confirmed payments. If the source is not reliably identified, it is stored as unknown without guesswork.

Transfer of data to third parties

A limited set of data may be transmitted to payment providers, email delivery service, Yandex ID, Telegram, VPN access provider and technical contractors only to the extent necessary to perform the selected operation.

When form protection is enabled, Cloudflare Turnstile receives the browser technical data and verification result necessary to counteract automated requests. Turnstile is not used as VPluse advertising analytics.

VPluse VPN does not sell personal data, and transfers to public authorities are possible only if there is a legal and binding requirement.

Cookies and web sessions

The site uses only the necessary cookies for secure login, one-time email and Yandex scripts, payment, renewal, restoration of the selected plan and remembering the closure of the notification.

Advertising and analytical cookies are not currently used, the current list and the timeframe are described in a separate cookies policy.

Attribution of the source of purchase does not use a separate cookie: the allowed parameters are transferred within the selected checkout and stored by the server only in a minimized form.

Data protection

Public pages do not show internal provider links, private keys, bot tokens, database strings, and private configurations.

Access to work data is limited by technical necessity and the user should not send full configurations or closed links in support.

Storage and deletion

One-time links and web sessions expire after a limited period and no longer grant access once completed or expired. Signing out closes the session but does not automatically delete its service record. Deleting a subscription also stops access and does not replace a request to delete personal data.

Account, subscription, payment, gift, bonus ledger, support and associated minimized attribution data are stored for as long as necessary to perform the service, record transactions, resolve disputes, protect against fraud and comply with legal requirements.

After deletion or depersonalization of the original records, anonymized aggregates for revenue, conversion and reliability of the service may be stored if they no longer allow identification of the user.

User rights

You may request information about your processed data, correction of inaccurate information or deletion when storage is no longer necessary and is not required by law.

Requests are received through the official VPluse VPN support contact. To protect your account, support may ask you to confirm one of the already associated login methods and subscription affiliation.

Contacts

For privacy and data processing, use the official VPluse VPN support contact on this page or in the Telegram bot.