Last updated: 12 October 2026 · Controller: ROL PORTAL SERVICES SRL
We do not keep:
Because this data never exists in our systems, we cannot sell it, hand it over, or lose it in a breach.
| Data | Why | Kept |
|---|---|---|
| Email address (for web/account sign-up) | Create your account, subscription, receipts, support | While your account exists |
| Anonymous device/user identifier | Link your device to your subscription | While active |
| Your WireGuard public key + a temporary tunnel IP | Route your session (the private key never leaves your device) | In memory during the session |
| Payment status (not card data) | Confirm your plan is active | As required by law/accounting |
| Aggregate, non-identifying counters | Capacity planning, fraud/abuse prevention | Aggregated, no PII |
| Optional crash/diagnostic reports | Fix bugs (only if you opt in) | Short-term |
VPNZONE for iPhone (App Store). The iOS app uses Apple's Network Extension framework to create the encrypted WireGuard® tunnel to the server you choose. To run the service it keeps on our side only a random app identifier generated on your device, the server and start time of your current session (in server memory only) and, on the free plan, the amount of data used today for the 400 MB daily limit. We keep no logs of what you do online. If you choose to restore a purchase by email, your address is used only to send you a one-time code. Purchases are processed by Apple: we receive only the signed App Store transaction needed to unlock VPNZONE Unlimited and never see your payment details. The app contains no third-party advertising or analytics SDKs.
Purchases are handled by our Merchant of Record (Paddle.com Market Ltd) on the web, by Google Play in the Android app and by Apple (App Store) in the iOS app. They process your payment and hold your billing details under their own privacy policies. We never see or store your full card number.
The vpnzone.net website may use minimal, privacy-respecting analytics and essential cookies. We do not run cross-site advertising trackers. Any optional analytics are aggregated.
We process the data above to perform our contract with you (provide the Service), to comply with legal obligations (e.g. accounting), and on the basis of our legitimate interest in preventing fraud and abuse and in keeping the network secure — always limited to non-browsing, minimal data.
We do not sell your data. We share only with the processors needed to run the Service (payment providers, email/infrastructure), under contract. If we receive a lawful legal request, we can only provide what we actually hold — and by design that does not include your activity, browsing, or the sites you visited.
Account data is processed in the EU. VPN traffic is handled in memory on the exit node and is not retained. We keep account and billing records only as long as needed for the Service and legal obligations, then delete or anonymise them.
Under the GDPR you can request access, correction, deletion, restriction, portability, and object to processing. To delete your account and data, email us. You may also lodge a complaint with the Romanian data protection authority (ANSPDCP) or your local authority.
The Service is not directed to children under 18. We do not knowingly collect their data.
We may update this policy; material changes will be posted here. Questions or requests: [email protected] · [email protected].
© 2026 ROL PORTAL SERVICES SRL — VPNzone. CUI RO 36837313 · J2016016379403.