Privacy Policy
Last updated: November 2026
This policy explains how VPNFile handles personal data on its website and user panel. It applies to account management, subscription services, payment reconciliation and customer support. Browsing activity during network acceleration and analytics about visits to the website itself are handled separately, as described below.
Account Data and How It Is Used
VPNFile does not require an email address; users can create an account with a username and password. Account data is used to verify identity, provide subscription information and manage service entitlements. Passwords are stored in a non-reversible verification format and are not used by customer support to verify account details.
Order records include the selected plan, amount, payment status and transaction identifier. They are used to activate services, reconcile payments and process refunds. Information and attachments users choose to include in a support ticket are used to investigate issues. Do not include passwords, full subscription links or sensitive information from payment credentials.
No-Logs Policy and Connection Data
VPNFile does not record which websites users visit through its network acceleration service. It does not store browsing history, destination domains, detailed DNS queries or communications, and it does not create activity profiles linking accounts to specific destinations.
While a connection is active, only the session state needed to forward data and manage the connection is processed. Temporary session state is cleared when the connection ends and is not retained as a long-term, traceable connection log. Aggregate account traffic and subscription status are used for billing and entitlement checks and do not include specific destinations.
Security incident records generated by the website and panel to prevent abnormal requests are handled separately from acceleration connection logs. They are used only for security investigations and are cleared when those investigations are complete. These records are not used to reconstruct users' browsing activity.
Site Analytics and Local Storage
Website analytics help us understand page visits, referral sources and button usage so we can improve content and workflows. Analytics are limited to the website and panel and do not extend to other websites users visit through subscription routes. Do not enter sensitive personal information in page addresses or public feedback.
Cookies and local storage are used to maintain necessary sessions, save language preferences and preserve login status. Login credentials may be stored in the browser's local storage so the panel can verify subsequent requests. After logging out, close panel pages on shared devices. Clearing site data in the browser also removes local state, but may require logging in again or resetting preferences.
Third-Party Payments and Data Disclosure
Payment methods include Alipay / WeChat / USDT. Payment authorization, fund transfers and related transaction information are handled by the relevant payment service or network under its own privacy rules. VPNFile receives only the payment result and transaction identifier needed to reconcile an order and does not ask users to provide their payment account password to customer support.
Necessary technical processing is limited to service delivery, payment processing and operational security. Account data is not disclosed to unrelated third parties unless authorized by the user, necessary to provide the service or required by law. If a lawful data request is received, only information actually held and required to be provided is processed after the basis for the request has been verified.
Data Retention and Deletion Requests
Account data is retained while the account is active. Order and refund records are retained for as long as needed to reconcile transactions, resolve disputes and meet applicable legal obligations. Support tickets, security incidents and site analytics are retained only for the period needed for their respective purposes, then deleted or de-identified. A single retention period is not applied to all data.
To access, correct or delete data, sign in to the panel and submit a request through the support ticket portal, specifying the account and scope involved. Account control must be verified before processing to prevent accidental deletion. Deletion may make subscription information unavailable. Records that must be retained by law or remain relevant to a dispute will have their use restricted and be cleared once the retention basis ends.
Policy Updates and Privacy Feedback
If data processing practices change, VPNFile will update this page and revise the last-updated month at the top. Significant changes to the scope of collection, purposes of use or user rights will be announced on the website or panel. Matters that legally require separate consent will be explained before the relevant processing begins.
For questions about this policy or specific data handling, submit privacy feedback through a panel support ticket. For service use and refund terms, see the Terms of Service. This policy does not replace the terms governing those transactions.