LEGAL
Privacy Policy
Last updated: 2026-09
This policy explains what information VPNBL processes while providing cross-border network acceleration subscriptions, why it is processed, how long it is kept, and how users can access or delete it. It is written in plain terms, without promotional language.
Data collection: scope and purpose
Signup information: Creating an account does not require an email address — a username and password are enough. Passwords are stored as irreversible hashes, and the system cannot read the original password. If a user voluntarily provides additional contact details through a ticket or another on-site channel, that information is used only to answer that request and for no other purpose.
Orders and billing records: These include the plan tier, order number, payment channel type, amount, order and activation timestamps, and the account's total data usage. These records are used to activate plans, meter traffic, and reconcile accounts. Traffic statistics only accumulate total volume; they do not include browsing destinations.
Analytics: Aggregated information such as page views, referral sources, and device and browser types, used to judge which pages are useful and where users run into obstacles. The analytics component is self-hosted on this site, the data stays on this site's servers, it is not shared with third-party ad networks, and it is not used for cross-site tracking.
No-logs stance
The service does not record which websites users visit. The specifics are set out below.
No browsing destinations stored: The domains, IP addresses, DNS query contents, and URL paths that users visit or attempt to visit are not recorded.
No connection logs: No session records containing connection times, durations, and destination addresses are kept.
Traffic counted as totals only: Plans are billed by traffic volume; the system only accumulates the total transferred per account for metering and overage checks, and does not record where that traffic went.
No inspection of transmitted content: Content transmitted by users is not read or stored, and user data is never sold or exchanged with any third party.
Retention: The technical information needed to establish a connection is processed in memory and is not written to disk for long-term storage.
Cookies and local storage
This site uses cookies and browser local storage for the limited purposes below.
Language preference: Remembers the interface language the user selected, so it does not have to be chosen again on every visit.
Login session: Credentials for the user panel are kept in browser local storage to maintain the signed-in state; they expire when the user signs out or clears browser data.
Interface state: Records interaction state such as the most recently viewed section, so users can return to where they left off.
Analytics: Used to distinguish visit sessions and count page views; contains no cross-site tracking identifiers.
This site does not use third-party advertising cookies and does not sell or share browsing data with ad networks. Users can clear or block cookies and local storage in their browser settings; doing so resets the language preference and sign-in state, but does not affect purchased subscriptions.
Payment and third-party processing
Payments are handled by the payment channels behind Alipay / WeChat / USDT. The service neither accesses nor stores payment account passwords, bank card details, or wallet private keys.
After a payment is completed, the service receives only the order status receipt, order number, and amount, which are used to activate the plan and reconcile accounts.
USDT transfers are recorded on the public blockchain and are outside the service's control; when transferring, users should keep in mind that the address and memo information are publicly visible.
Refunds follow a 60-day no-questions-asked policy; funds are returned to the original payment channel, and how quickly they arrive depends on that channel's processing speed.
Data retention periods and deletion
Account and subscription information: Kept for as long as the account exists, for sign-in, subscription status checks, and ticket handling.
Order and payment records: Kept for the period needed to complete reconciliation and meet legal obligations, then deleted or anonymized.
Analytics data: Kept in aggregate form and contains no personally identifiable information.
How to delete: Sign in to the user panel and submit a deletion request via a ticket; once identity is confirmed, the account information and subscription data are deleted, and deletion cannot be undone.
Policy updates and contact
When the policy changes, the “Last updated” date at the top of this page is revised.
For significant changes to the scope of data or how it is used, a prominent notice will be posted on the site, with reasonable advance notice before the changes take effect.
Questions about this policy, or requests to access, correct, or delete personal information, can be submitted through the ticket entry in the user panel — after signing in, simply open a new request under “Tickets”.