Privacy Policy

Account Data and Purpose of Processing

No email address is required to create an account; a username and password are sufficient. VPNRose processes usernames, information needed to verify passwords, account status and subscription details for identity verification, access management and service delivery. An email address is not required to create an account.

When using a support ticket, provide only a description relevant to the issue. If you choose to provide an email address or other additional information, it will be used only to handle the related request. Do not submit passwords, complete payment credentials or subscription links in a support ticket. Subscription status and data usage are used to calculate allowances, not to build browsing preference profiles.

No-Logs Policy and Operational Information

VPNRose does not record which websites users visit, store browsing content, visited domains or DNS query history, or create activity logs linking accounts to their browsing destinations.

Connection logs for subscription routes are not retained persistently. This includes source addresses, destination addresses and detailed connection times that could reconstruct an individual's connection activity. Temporary state needed to maintain an active connection is used only while the connection is running, then released when it ends; it is not converted into a historical connection record.

Account-level cumulative data usage and subscription validity are used for billing and allowance management and do not include browsing destinations. Website and user panel analytics are handled separately from subscription route activity and are not used to reconstruct content accessed through those routes.

Analytics and Browser Storage

The website may process page paths, referring pages, browser types, device categories and interaction events to understand how pages are used, identify broken links and improve workflows. Analytics should not include passwords, authentication tokens, complete subscription addresses or support ticket content. If analytics fields inadvertently capture such data, they should be cleared and the collection rules corrected.

Cookies and local storage are used to maintain sign-in, save language preferences and retain necessary interface state. Authentication information may be stored in the current browser to verify identity in subsequent requests. After using a shared device, sign out of your account and clear site storage if needed.

You can restrict cookies, clear local storage or use tracking protection through your browser settings. Clearing essential storage may sign you out, reset preferences or require some user panel features to be verified again.

Order Records and Third-Party Payments

VPNRose retains account-linked plan details, order amounts, payment status, transaction reference information and refund records to deliver services, reconcile payments and handle disputes. Supported payment methods are Alipay / WeChat Pay / USDT.

Payments are processed by the relevant third party. Payment providers may collect transaction and verification information under their own rules. VPNRose receives the information needed to verify order completion and does not ask users to submit payment account passwords to this site. Transactions on public blockchains are subject to the public nature of those networks; deleting records from this site cannot remove on-chain data.

Data Retention and Deletion Requests

Account data is retained while services are provided. Support ticket and analytics data are kept only for as long as needed to fulfill their purposes. Once those purposes end, the data is deleted or aggregated so it can no longer be linked to an individual. Order and refund records may be retained, with restricted use, only to the extent needed for reconciliation, disputes or applicable retention obligations.

You can request access to, correction of or deletion of account-related data through user panel support tickets. Account ownership must be verified before a request is processed to prevent impersonation. Deletion may affect continued subscription use. If any records cannot yet be deleted, the reason and scope of processing will be explained. Residual data in backups is cleared as backups rotate and is not restored for routine business use.

Processing Boundaries and Policy Updates

Data is used and shared only as needed to deliver services, support necessary processing or meet applicable legal requirements. Information shared with service partners is limited to what is needed for the relevant purpose. Account data is not sold or used for marketing unrelated to the service.

When this policy changes, this page will be updated and the updated month at the top will be revised. Significant changes to data use or how rights can be exercised will be announced on the website or user panel. If you have questions about the policy, submit them through a support ticket. Subscription rules are set out in the Terms of Service.