Privacy Policy

Account Data and Processing Purposes

No email address is required to register; a username and password are sufficient. VPNFlat processes usernames, credentials used to verify passwords, and account status to authenticate users, manage subscriptions, and check account security. An email address is not required for registration. If a user voluntarily provides an email address or other contact details in a support ticket, they are used only to handle that request.

Order data includes the selected plan, amount, payment status, transaction reference, and refund records. It is used to activate subscriptions, verify payments, and resolve disputes. Text and attachments submitted in support tickets are used to investigate issues. Do not submit account passwords, complete subscription links, or personal data unrelated to the issue.

No-Logs Policy and Connection Data

VPNFlat does not record which websites users visit through its subscription services, or store browsing content, destination domains, DNS query history, or communications. It does not create profiles of users' network activity. Page-visit analytics for the marketing website are handled separately from traffic carried by subscription services.

During service connections, only data necessary to establish connections, authenticate users, and measure traffic is processed. Session status is used only while a connection is active and is not retained as connection history after disconnection. Connection logs linking an account, source address, connection time, and destination are not stored persistently. Account-level cumulative traffic and subscription status are used to calculate allowances and do not include specific destinations.

Website Analytics and Local Storage

Website analytics help us understand page readership, referral sources, and feature usage. They may include page paths, browser and device categories, visit times, and referring pages. Analytics are limited to maintaining the website and improving workflows; they are not used to reconstruct browsing activity within subscription services.

Cookies and local storage are used to maintain sign-in status and save language preferences and necessary interface settings. Sign-in credentials may be stored in the browser's local storage, so avoid keeping a session on a shared device. Users can restrict cookies or clear site data through their browser settings. After clearing data, users may need to sign in again and select a language. Clearing local data does not delete a server-side account.

Third-Party Payments and Data Disclosure

Supported payment methods are Alipay / WeChat / USDT. Payments are processed by third parties, which handle transaction data under their own rules. VPNFlat receives the information necessary to confirm order results and does not ask users to submit payment account passwords or wallet private keys to this service.

VPNFlat does not sell account data. Data is processed or disclosed only as needed to provide the service, handle user requests, perform necessary technical maintenance, or comply with valid legal requirements. The responsibilities of third parties that receive data and the rights users can exercise are also governed by their applicable policies.

Data Retention and Deletion Requests

Account and subscription data is retained for as long as needed to provide the service. Order and refund data is retained until transaction reconciliation, dispute handling, and applicable legal obligations are complete. Support ticket attachments and website analytics are retained only for as long as their respective purposes require, then deleted or de-identified. No single retention period applies to all data.

To access, correct, or delete account data, sign in to the user panel and describe the scope of your request through the support ticket portal. Account ownership must be verified before a request is processed. Deletion may affect subscription use and access to order records. Records that must be retained by law will be restricted to necessary uses; related data in backups is cleared through normal rotation and is no longer used for routine service operations.

Policy Updates and Questions

Updates to this policy will be published on this page, and the date at the top will be updated. Material changes to processing purposes or data scope will be communicated through the website or user panel. Where legally required, consent will be requested separately. Privacy questions can be submitted through a support ticket in the user panel. For service rules, see the Terms of Service.