Privacy Policy — UFO VPN

Last Updated: July 11, 2026 At UFO VPN, privacy is the product. This policy explains — in plain language — exactly what we collect, what we do not collect, and why. 1. What We Do Not Collect We do not log, store, or record: • Your browsing history, DNS queries, or the websites and services you connect to • Your real IP address after you connect to a VPN server • Session timestamps, connection duration, or bandwidth used per session • Any metadata that could link your identity to your online activity • Your name, physical address, phone number, or government ID • Your email address — we do not ask for one Because we never collect this data, we cannot hand it over, sell it, or lose it in a breach. 2. What We Do Collect (the minimum) To run the service, we retain only: • Account number — a randomly generated 20-digit identifier we issue at signup. This is the only credential tied to your account. No email, no personal data. • Password hash — stored using industry-standard one-way hashing. We cannot read your password. • Subscription record — the plan you chose, its start date, and its expiry date, so we know when your access is active. • Payment reference — the cryptocurrency invoice ID returned by our payment processor. We do not store card numbers, bank details, or wallet addresses on our servers. • VPN configuration metadata — the config name, its creation and expiry date, and the server it is bound to. This is required to deliver a working config to your device. We do not associate any of the above with your traffic. 3. Payments Payments are processed exclusively in cryptocurrency through a self-hosted BTCPay Server instance we control. We receive only the invoice ID and payment status (paid / unpaid). We do not receive or store your wallet address, transaction hash, real name, or billing address. All crypto payments are final and non-refundable once the invoice is settled. 4. VPN Infrastructure Our VPN nodes run on servers we operate. Traffic is encrypted with modern protocols (VLESS / VMess / Trojan over TLS). VPN servers are configured to not write connection logs to disk. Aggregate, non-identifying metrics (total server load, uptime) may be observed for capacity planning — these are never tied to an account. 5. Cookies and Analytics Our website uses only the strictly necessary cookies required to keep you signed in. We do not use third-party analytics, advertising trackers, fingerprinting scripts, or session-replay tools. 6. Third Parties We do not sell, rent, trade, or share your data with advertisers, data brokers, or any third party for marketing purposes. The only third parties involved in delivering the service are: • The cryptocurrency payment processor (BTCPay), which sees only the invoice. • The hosting providers of our VPN nodes, which see encrypted traffic passing through their networks — never its contents or its association with an account. 7. Legal Requests Because we do not retain traffic logs, IP assignments, or identity data, we have nothing to produce in response to subpoenas, warrants, or informal requests regarding user activity. If we receive such a request, we can only confirm that no such data exists. 8. Data Retention and Deletion • Account and subscription records are kept for as long as your account is active. • When you delete your account, all account records, subscription records, and VPN configurations tied to it are permanently removed from our systems. • Payment references may be retained for the minimum period required for accounting integrity, and contain no identifying information. 9. Security Passwords are hashed. Database access is restricted and requires authentication. VPN configuration links are unique per user and expire with the subscription. We continuously review our infrastructure to reduce the data that exists in the first place — the strongest privacy control is not collecting data. 10. Your Rights Because your account is anonymous by design (identified only by a random 20-digit number), most traditional privacy rights — access, correction, portability — are satisfied by the account itself. You may delete your account at any time from the dashboard, which purges all associated data. 11. Changes to This Policy If this policy changes, we will update the "Last Updated" date above. Material changes will be highlighted in the dashboard before they take effect.