Privacy Policy

Last updated: November 10, 2026

1. Data Controller

The data controller for this website is:

2. Data We Collect

Account & purchase data

When you create an account or purchase a VPN plan, we collect:

• Full name
• Email address (used as your account username)
• Payment information (we do not store full card numbers)
• Billing address (for invoicing)

Usage data

When you use the VPN service we collect:

• Server node you connect to
• Connection timestamps and session duration
• Bandwidth usage (total data transferred)
• Device type and app version

Website analytics

We use order attribution to track how visitors find and interact with the site. This sets cookies with referral and timing data. See our Cookie Policy.

Cookie consent

We use a consent management tool to store your cookie consent choice (accepted / declined / partially accepted).

3. Legal Basis for Processing (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)) — processing your account, order, and VPN usage data to deliver the service you purchased.
• Consent (Art. 6(1)(a)) — website analytics cookies (you can withdraw consent at any time via the cookie settings link in the footer).
• Legal obligation (Art. 6(1)(c)) — retaining financial records for tax and accounting purposes (Romanian commercial law).
• Legitimate interest (Art. 6(1)(f)) — fraud prevention, security monitoring, and service improvement.

4. How Long We Keep Your Data

• Account data: while your account is active + 3 years after closure (legal retention)
• Order / payment records: 5 years (Romanian commercial code requirement)
• Usage logs: 90 days after the relevant connection
• Cookie consent: until you change or delete it

5. Who We Share Your Data With

• Payment processor — to process your payment
• VPN infrastructure — to manage your VPN account and server connections
• Tax authorities — as required by Romanian law

We do not sell your personal data to third parties.

6. Your Rights (GDPR Arts. 15–22)

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasion — request deletion of your data (“right to be forgotten”)
• Restriction — limit how we process your data
• Data portability — receive your data in a structured format
• Objection — object to processing based on legitimate interest
• Withdraw consent — at any time, without affecting prior processing

To exercise any right, email Contact Us. We respond within 30 days.

Right to complain

You have the right to lodge a complaint with the Romanian data protection authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPPDCP)
Str. Știrbei Vodă nr. 10, Sector 3, Bucharest 030610, Romania
Web: https://www.dataprotection.ro

7. Cookies

We use cookies for authentication, session management, cookie consent, and (with your consent) analytics. See our Cookie Policy for full details.

8. Security

We use SSL/TLS encryption for all data in transit, server-side encryption for stored credentials, and access controls to limit who can view your data. No system is 100% secure, but we apply industry-standard measures.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on this page with a new “last updated” date. Continued use of the site after changes constitutes acceptance of the updated policy.