Privacy Policy

Last updated: 09/2026

This policy explains what data VPNFL (referred to below as the Service) collects while providing cross-border network acceleration and subscription services, why it is collected, how long it is kept, and how users can access and delete their own data. It applies to every language version of vpnfl.com and to the user dashboard.

What data is collected, and why

The Service collects only the data needed to provide the service, in three categories:

• Account data. Sign-up requires only a username and password, with no email address, so no contact details such as email are collected. The username is used for login and to link orders; the password is stored with irreversible encryption, and the Service cannot view the original password.
• Order and subscription data. This covers plan name, order number, amount, payment status, activation date and data usage. It is used to activate and renew subscriptions, verify usage and expiry dates, and process refund requests.
• Visit statistics. We use self-hosted analytics that record aggregate information such as page views, referrers and device type, to understand how the site is running and how content performs. The results are not used for advertising and are not shared with third parties.

Beyond these three categories, the Service does not actively collect any other personal information.

About our no-log stance

Not recording which websites users visit is a core privacy commitment of the Service:

• No connection logs are kept, including destinations visited, DNS query records and connection timestamps.
• Because those records are not kept, the Service cannot and will not provide users' browsing records to any third party.
• Account and order data are stored separately from browsing activity and are used only for billing and support, never to analyse what users do online.
• Traffic statistics stop at the account level — usage figures used for plan metering and expiry reminders — and never involve specific destinations.

Cookies and local storage

The site uses no third-party advertising cookies and does no cross-site tracking. Browser local storage serves only two purposes:

• Login state. Login credentials are kept in local storage so you do not have to sign in again while they remain valid.
• Interface preferences. Settings such as your language choice are saved, so your next visit opens directly in that language.

Clearing your browser data or signing out removes the locally stored login state, and you will need to sign in again on your next visit.

Payments are handled by third-party providers

Payments are completed through third-party payment providers, supporting Alipay, WeChat Pay and USDT. The Service never touches or stores payment credentials such as card numbers or payment passwords; orders retain only the order number, amount, payment time and payment status, for reconciliation, refunds and support.

Third-party payment providers apply their own privacy policies and security measures to the data they process; the exact scope is governed by each provider's own documentation.

Data retention and deletion

• Account data. Kept for as long as the account exists; when the account is deleted, login credentials and interface preferences are removed with it.
• Order records. To meet reconciliation and after-sales needs, essential order information — order number, amount and date — is retained after account deletion, no longer linked to identifiable login credentials.
• Visit statistics. Only aggregate results are kept; no detail that can be traced back to an individual user is retained.
• Connection logs. Not recorded, not retained.

How to delete: sign in to the user dashboard and submit a request through the ticket portal, stating the scope of data to be deleted; once the request is accepted, deletion follows the retention periods above.

Policy updates

If the policy changes, this page will be updated and the Last updated date at the top revised accordingly; for significant changes to the scope of data collection or how data is used, a prominent notice will be posted on the site so users can review the differences before the changes take effect.

Continued use of the Service is taken as acceptance of the updated policy; if you do not accept it, you may stop using the Service and request deletion of your data via a ticket. Other terms relating to accounts and subscriptions are set out in the Terms of Service.