Privacy Policy

Last updated: October 2026

This policy explains how VPNSon uses and protects data when providing subscription services, processing orders, and maintaining this website.

Account and Order Data

No email address is required to create a VPNSon account; a username and password are sufficient. Email is not a required registration detail. Account data is used for authentication, subscription delivery, and account management. Passwords are stored as non-reversible verification data and are not available to customer support in plain text.

Order processing involves the selected plan, order identifier, payment status, transaction time, subscription status, and data usage. This information is used to confirm entitlements, verify payments, process refunds, and resolve billing disputes. Data usage is an aggregate amount needed for billing; it does not include website visits or communication content.

When a user submits a support ticket, its description and attachments are used to handle that request. Do not include account passwords, payment credential keys, or complete subscription links in a ticket.

No-Logs Policy and Connection Handling

VPNSon follows a no-logs policy: it does not record which websites users visit, retain browsing histories, destinations, or transmitted content, or link accounts to specific website activity.

Network connections require temporary handling of routing and session states while active. These states are used only for transmission and connection management, then released when a session ends or they are no longer needed. They are not retained as connection logs that could be used to reconstruct personal activity. Aggregate data usage for billing and subscription status are managed as account data and do not constitute website visit records.

Website login, order, and support ticket records are separate from network access logs. The no-logs policy does not mean that business records necessary to provide subscriptions, process payments, or protect accounts are deleted.

Access Analytics and Local Storage

Website analytics help us understand referral sources, page views, and entry-point clicks so we can improve content and workflows. They are not used to record destinations visited through subscription connections. Analytics are limited to what is necessary and should not include passwords, authentication tokens, or subscription credentials.

Cookies and browser local storage may be used to maintain login sessions, save language preferences, and store necessary interface settings. Authentication tokens identify logged-in sessions and are not displayed as public page content.

Users can restrict cookies or clear this site's storage in their browser settings. Doing so may require logging in again or selecting preferences again; clearing local storage does not automatically close an account or delete server-side order records.

Third-Party Payments and Data Sharing

VPNSon supports Alipay / WeChat Pay / USDT. Payments are processed by the relevant third-party payment service, and its privacy policy also applies to its handling of transaction data. VPNSon receives the transaction identifier, result, and status needed to verify orders. Users are not asked to provide payment account passwords to this site.

Account data is not sold or rented. When technical service providers are involved in delivering the service, data use is limited to what is necessary for their assigned responsibilities. If disclosure is legally required, existing data is handled only to the extent required by law; this does not result in the creation of access logs that were not otherwise collected.

Data Retention and Deletion Requests

Account data is retained for as long as the account remains active and the service requires it. Order, refund, and support ticket records are retained as needed to fulfill obligations, resolve disputes, and comply with applicable laws. Access analytics are kept only for the period needed for analysis, then deleted or de-identified; identifiable data is not retained indefinitely.

Users can log in to the panel and use the support ticket portal to request access to, correction of, or deletion of account data. Account ownership must be verified before processing a request to prevent the accidental deletion of another person's account. Deletion may make login, subscription restoration, and access to historical order information unavailable.

Records related to pending orders, refunds, disputes, or legal retention obligations can be addressed after the relevant matter is resolved or the retention obligation expires. Backup data is cleared through normal rotation and is not reused for routine business purposes. The outcome of a request, including reasons for any data that cannot yet be deleted, will be explained through a support ticket.

Data Protection and Policy Updates

VPNSon manages data through access controls, protection of authentication information, and necessary safeguards for data in transit. Account data is handled only by people or systems that need it to perform their assigned responsibilities. Users should also safeguard their passwords and subscription credentials and avoid sharing them publicly.

Policy changes will be published on this page, and the date at the top will be updated. Significant changes to data collection, purposes of use, or user rights will be highlighted on the website or in the panel. Where separate consent is required, it will be requested before the relevant processing begins. Questions about this policy can be submitted through a support ticket in the panel.

Start Free