Privacy Policy
Last updated: October 2026
This policy explains how VPNStay handles data when you browse the website, use an account, receive a subscription, or contact support. Website analytics and activity on international routes are separate matters, explained below. Please also read the Terms of Service before using this service.
Account and Order Data
No email address is required to create an account; a username and password are sufficient. VPNStay processes usernames, protected password verification data, and account status for authentication, login, and account management. Providing a registration email is not a condition of using the service.
When you activate a plan or data package, this service retains the order identifier, selected item, amount, payment status, transaction references, and refund records to deliver the subscription, verify payment, and handle billing disputes. The plan status, remaining data, and cumulative usage associated with an account are used for billing and to display entitlements, not to reconstruct browsing activity.
When you submit a support ticket, your description of the issue and any attachments you choose to provide are used to diagnose problems and respond to your request. Do not include passwords, complete subscription links, or sensitive payment credentials in a ticket.
No-Logs Policy and Connection Data
VPNStay follows a no-logs policy. It does not record which websites users visit through international routes, retain browsing history, request content, or DNS query history, or create records linking accounts to destination websites.
Connection status processed temporarily to establish a network connection is used only while needed to provide that connection. After the connection ends, it is not retained as a connection log that can trace individual browsing activity. This service does not keep historical details linking a source IP, destination address, and connection time.
Cumulative data usage and plan status used for account billing are not website browsing logs. Route troubleshooting is based on operational status and information users choose to submit, not on stored browsing content.
Site Analytics and Local Storage
Analytics for the marketing website help us understand page views, referral categories, on-page clicks, and device and browser categories so we can improve content and usability. Analytics cover pages on this website, not other websites visited through international routes. Analytics events should not include passwords, subscription credentials, or sensitive payment information.
Cookies and browser local storage are used to maintain sessions, save login credentials, store language preferences, and retain necessary interface state. Analytics may also use browser identifiers to recognize a browsing session. These purposes are separate from recording network browsing content.
You can restrict cookies, clear site data, or use tracking restrictions provided by your browser settings. After clearing data, you may need to log in again or select your preferences. Logging out and clearing site data can help remove login traces from a shared device.
Third-Party Payments and Data Disclosure
This service supports Alipay / WeChat Pay / USDT. Payments are handled by the relevant third-party providers. VPNStay receives payment results and transaction references needed to fulfill orders and does not require passwords for third-party payment accounts.
Third-party providers handle data under their own privacy policies. USDT transactions may involve public on-chain records, and this service cannot delete information already stored by third parties or on public ledgers.
VPNStay does not sell personal data. Necessary information is shared with the relevant service providers only when required to deliver the service, meet legal obligations, or resolve disputes. The purpose and scope of processing are limited.
Data Retention and Deletion Requests
Account information is retained for as long as the account remains active and as needed to provide the service. Order and refund records are kept as required for billing reconciliation, dispute handling, and applicable laws. Support tickets and analytics are retained only as long as needed for their respective purposes, then deleted or de-identified. No single fixed retention period is promised.
To access, correct, or delete account data, log in to the user panel and submit a request through the support ticket portal. To prevent accidental deletion, this service will verify account control and explain what can be processed and how it may affect subscription use.
Records that must be retained by law or are involved in an unresolved dispute cannot be deleted along with an account request. They will be cleared when the relevant purpose ends. Users must clear local data stored in their browsers themselves.
Data Protection and Policy Updates
VPNStay reduces data risks through access controls, protected identity verification, and necessary safeguards for data in transit. Users should keep account credentials and subscription information secure and report unusual activity through a support ticket.
When this policy changes, this page will be updated with the revised content and the month of the latest update. Significant changes to processing purposes or scope will be announced on the website or in the user panel. Matters requiring separate consent will be handled as applicable. You can also submit a support ticket through the user panel if you have questions about this policy.