Privacy Policy

Last updated: October 2026

This policy applies to the processing of personal data on the VarVPN marketing website, user panel and subscription services. The sections below explain how data is handled for accounts, network connections, website storage and payments. Third-party websites and payment services are governed by their own privacy policies.

Account and Order Data

No email address is required to create an account; a username and password are all you need. An email address is not required information or a default identity verification method. Avoid including personal information unrelated to the service in your username or support tickets. Any information you submit is used only to handle the request concerned.

Account data includes your username, password verification data, plan status, traffic usage, order number, amount and payment status. This information is used for login verification, subscription delivery, billing reconciliation, refunds and support. Traffic usage is used to calculate allowances and does not include browsing content.

No-Logs Policy and Connection Data

VarVPN follows a no-logs policy: we do not record which websites users visit or retain browsing history, request content or the contents of communications transmitted through subscription routes. We do not create connection log archives that can be used to reconstruct an individual's browsing activity.

To establish connections, calculate traffic usage and troubleshoot issues, the system processes the operational information needed for each connection. Connection logs are not retained persistently; temporary operational status is cleared after processing. Cumulative account traffic and order records are retained for their business purposes and are not linked to destination websites or browsing content.

Website analytics and subscription route activity are handled separately. Website analytics are not used to analyze content accessed by users through subscription routes.

Website Analytics and Local Storage

Website analytics help us understand page visits, referral sources, device categories and entry-point clicks so we can identify page issues and improve content. Analytics are limited to website interactions and do not include passwords, authentication credentials, subscription addresses or support ticket content.

Cookies and local storage are used for session identification, login status and language preferences. The user panel stores login credentials locally in your browser so the server can verify your identity. After using a shared device, log out and clear the site data.

You can restrict cookies or delete local storage in your browser settings. You may need to log in again or reselect your preferences afterward. Restricting essential storage may affect panel functionality.

Third-Party Payments and Data Disclosure

Supported payment methods are Alipay / WeChat Pay / USDT. The relevant third-party provider handles payment processing; its own terms explain its identity verification, transaction processing and data retention practices. VarVPN does not ask for the login password to a third-party payment account.

To reconcile payments and process refunds, this service retains the necessary order and transaction status information and shares the information required to complete a transaction with the relevant provider. Personal data is not used for sale. Where disclosure is necessary for service operations or required by applicable law, it is limited to what is necessary for that purpose.

Data Retention and Deletion Requests

Account data is retained until account services end and related matters are resolved. Order and refund records are retained for as long as necessary to complete transactions, resolve disputes and meet applicable legal requirements. Website analytics are deleted or aggregated when they are no longer needed for analysis; they are not retained indefinitely without a purpose.

To access, correct or delete account data, log in to the panel and submit a privacy-related support ticket describing your request. We will verify account control before processing it. Deletion may affect login and subscription delivery. If an order is unsettled, a dispute is ongoing or data must be retained by law, we will explain what cannot yet be deleted and why.

Security and Policy Updates

This service restricts access to data according to its purpose. Keep your account password, login credentials and subscription address secure, and do not post them publicly. If you notice unusual activity, change your password and describe the issue in a support ticket.

Updates to this policy will be published on this page, and the date at the top will be updated. Significant changes to data purposes or processing scope will be announced on the website or in the user panel. For specific terms on service use and refunds, see the Terms of Service and Refund Policy.