Last updated: February 2026 · Effective immediately
We collect only what is necessary to provide the service: your email address at registration, and payment information processed securely by our payment provider (Stripe). For service operation and abuse prevention, we also record your IP address when you log in and when you connect to a VPN server. We do not log your VPN traffic content, browsing history, DNS queries, or the websites you visit.
Your email is used to send account-related communications (verification, password reset, subscription notices). Payment data is processed by Stripe and never stored on our servers. Your IP address is used for session management, device identification, and abuse prevention. We do not sell, rent, or share your personal data with third parties for marketing purposes.
VPN XO does not monitor, record, or store: the content of your VPN traffic, your browsing history, DNS queries, or the websites and services you access through the VPN tunnel. We do record your connecting IP address and connection timestamps for service operation and abuse prevention. Our VPN servers are RAM-only where technically feasible.
Our website uses only essential cookies necessary for authentication and session management. We do not use advertising cookies, third-party tracking pixels, or analytics services that identify individuals.
Account data (email, hashed password, subscription status) is retained while your account is active. Connection metadata (IP address, connection timestamps, server location, bandwidth used) is retained for up to 30 days for service operation and abuse prevention. Upon account deletion request, all personal data is removed within 30 days. Anonymized, non-identifiable aggregate statistics may be retained indefinitely.
All data in transit is encrypted using TLS 1.3. Passwords are hashed using bcrypt. Our infrastructure is protected by industry-standard firewalls and access controls. We conduct regular security audits and promptly address vulnerabilities.
You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at [email protected]. For EU/EEA residents: you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.
We may update this Privacy Policy periodically. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance of the updated policy.
For privacy inquiries: [email protected]. For general support: [email protected].
© 2026 VPN XO. All rights reserved.