//Legal ยท Data Processing

Privacy Policy

This page explains what data VPNQF processes when delivering cross-border access and international route acceleration, why it is processed, how long it is kept, and how users can request deletion. The policy follows a data-minimisation approach, and the billing and refund clauses match those on the pricing page and in the Terms of Use.

Last updated: 2026-10

1. Data collected and how it is used

VPNQF collects data only to the extent required to provide the service, in four categories.

  • Account information: signing up requires only a username and password, with no email address. Passwords are stored as irreversible hashes; plaintext is never kept.
  • Order and billing records: the plan tier purchased, amount, payment channel (Alipay / WeChat / USDT), order time and order status. Used to activate subscriptions, process renewals, reset data allowances on the activation date, and verify 60-day refunds.
  • Session metrics: client platform, connection start and end times, and the total traffic volume of that session. Used to meter plan and data-pack usage and to diagnose connection faults.
  • Site analytics: page views, referrer, device and browser type, and approximate region. Used to identify which pages need improvement and to trace front-end errors.

None of these four categories includes the specific websites a user visits.

2. The no-logs stance and connection records

VPNQF does not record which websites users visit. On international routes, destination addresses, DNS query contents, page content and transferred files are not stored.

The only technical metrics generated during a session are connection duration and total traffic volume, used for metering and troubleshooting. They are not tied to specific destinations and cannot be used to reconstruct browsing history. Route and node operating data is aggregated for capacity planning and peak-hour bandwidth allocation.

Account data, order records and site analytics are not used for advertising profiles and are not sold to third parties.

3. Cookies and local storage

The site uses browser local storage and cookies for two purposes: keeping users signed in and remembering language preference.

  • Local storage: stores the login session token and language selection. Clearing browser data means signing in again.
  • Cookies: a session identifier used for site analytics; it contains no passwords, payment credentials or order details.

Users can clear or block this storage in their browser settings. Once blocked, sign-in state and language preference are no longer retained, but page content remains fully readable.

4. Payments and third-party processing

Payments are completed through Alipay, WeChat and USDT. Payment account details, balances and wallet private keys are handled within those channels and never pass through VPNQF servers; the site only receives the payment result, order number and amount, used to activate subscriptions and verify refunds.

Apart from payment channels and the services required to run the network routes, account data is not shared with other third parties. Where a legally valid request for data is received, VPNQF cooperates only to the extent the document requires.

5. Retention periods and deletion requests

Account details and order records are kept for as long as the account exists. Session metrics are kept for the shortest period needed for metering and troubleshooting, then overwritten. Site analytics are retained in aggregate and are not linked to individual accounts.

Deletion requests are submitted through the ticket form in the user panel. Once account ownership is verified, account details, login credentials and ticket records are deleted; order records that must be kept for refund verification or legal obligations are deleted or anonymised once that check is complete. After deletion, the account and subscription records cannot be restored.

6. Policy updates and contact

When the policy changes, the last-updated date at the top of this page is revised. Material changes to the scope or purposes of data processing are announced prominently on the site. Continuing to use the service after a change takes effect means accepting the updated policy.

Questions about this page, or requests to access, correct or delete personal data, should be submitted through the ticket form in the user panel; tickets are the only channel for privacy requests. Include the username and what the request is about, and no password is needed.