Privacy Policy
Last updated: October 2026
This policy explains how VPNIon handles data when providing accounts, subscription services, and website features. It covers the marketing website and user panel. Once you leave this site, the relevant third-party website or payment service's own policy applies to its data handling.
Account Data and How It Is Used
VPNIon does not require an email address to create an account; a username and password are sufficient. An email address is not required for account registration. If a user voluntarily provides an email address or other contact details in a support ticket, that information is used only to handle the related request. Please do not submit personal information unrelated to the issue.
Account management involves the username, password credentials used to verify identity, subscription status, and data usage. This information is used to verify logins, provide subscriptions, calculate allowances, and resolve account issues. Order records include the selected plan, amount, payment status, and transaction reference information. They are used to confirm entitlements, reconcile payments, and process refunds.
Anonymous No-Logs Policy and Connection Data
VPNIon follows an anonymous no-logs policy. It does not record which websites users access through the service or retain browsing history, accessed content, or DNS query history. Data usage calculations do not include details of websites visited and are not used to build profiles of browsing activity.
The service does not retain source addresses, destination addresses, or connection times as connection logs that could be used to trace an individual's access activity. Temporary session state needed to maintain a connection is used only for that connection and is not kept as a historical connection record after it ends. Account logins, orders, and support tickets are handled separately from network access content; the no-logs policy does not mean that these necessary business records do not exist.
Access Statistics and Local Storage
Website access statistics help us understand page visits, referral sources, and button usage so we can improve content and workflows. Statistical events should not contain passwords, authentication credentials, complete subscription addresses, or support ticket content. They are not used to track other websites users visit over international routes.
Cookies and browser local storage may be used for login status, session verification, and language preferences. Authentication credentials allow the panel to recognize a signed-in account and should not be shared with others. Users can clear or restrict storage through their browser settings. Clearing it may require signing in again, and preferences may return to their defaults. Signing out and clearing local data do not delete account records on the service's servers.
Payment Processing and Necessary Disclosures
VPNIon supports Alipay / WeChat Pay / USDT. Payments are processed by third-party payment providers or the relevant transaction network. The service receives the payment result and transaction identifier needed to verify an order and does not ask users to submit their payment account passwords to this site. Providers may handle payment information under their own rules; please review their privacy notices before using them.
Business data is used only as necessary to provide the service, verify transactions, handle disputes, or meet applicable legal obligations. When external processors are involved, the purposes and scope of data processing should be limited. For legally required disclosures, the basis of the request should be verified. The service does not sell users' personal data.
Data Retention and Deletion Requests
Account and subscription data is retained for as long as needed to provide the service. Order records are retained as required for reconciliation, refunds, dispute handling, and applicable legal obligations. Support ticket data is retained while an issue is being resolved and for any necessary follow-up review. Once the purpose has been fulfilled and there is no basis for further retention, relevant data should be deleted or de-identified. No single fixed retention period is promised.
Users can sign in to the panel and submit requests to access, correct, or delete information through the support ticket portal. To prevent someone else from claiming access to the data, the service must verify account ownership. Deletion may make the account and subscription unavailable. Records that must be retained by law or relate to an unresolved dispute cannot be deleted as part of the request; the reason and scope of handling should be explained.
Policy Updates and Questions
When this policy changes, the revised content will be published on this page and the month at the beginning will be updated. Significant changes to processing purposes, data categories, or user rights should be explained through a site announcement or panel notice. Matters that require separate consent by law will be handled in accordance with applicable requirements.
If you have questions about this policy or the handling of personal data, submit a support ticket through the user panel. Include the relevant account and issue, but do not provide passwords, authentication credentials, or complete subscription addresses. See the Terms of Service for subscription entitlements and refund rules.