Privacy Policy

1. Our Privacy Commitment

At YouCantSeeMeVPN, privacy is not just a feature—it's our architecture. We have designed our entire system to make surveillance mathematically impossible, even by us.

Core Principle: We collect the absolute minimum data necessary to provide the Service, and we never log or track your VPN usage.

2. Information We Do NOT Collect

Our no-logs architecture ensures we do not collect, log, or store:

• Traffic Data: We do not log websites you visit, files you download, or services you access
• Connection Logs: We do not log connection timestamps, session duration, or bandwidth usage
• IP Addresses: We do not log your original IP address or the IP addresses you connect to
• DNS Queries: We do not log your DNS requests or browsing history
• User Activity: We do not monitor, inspect, or record your internet activity in any way

This is not a policy choice—it's an architectural impossibility. Our servers store all operational logs in RAM only, which is automatically wiped every 6 hours during scheduled system reboots.

3. Information We Do Collect

To operate the Service and manage your account, we collect only:

3.1 Account Information

• Email Address: Used for account creation, authentication, and service communications
• Password: Stored using industry-standard encryption (bcrypt hashing via Firebase Auth)
• Display Name: Optional, used for personalization

3.2 Subscription Information

• Plan Type: Your current subscription tier (Free, Basic, Pro, Family)
• Subscription Status: Active, trialing, past_due, or inactive
• Billing Dates: Trial end date and subscription renewal dates
• Payment Status: Whether your last payment succeeded or failed

Note: We do NOT store payment card information. All payment processing is handled securely by Stripe.

3.3 Device Configuration Data

• Device Labels: Names you assign to your devices (e.g., "My Laptop")
• WireGuard Public Keys: Used for VPN authentication (not personally identifiable)
• Server Preferences: Which server regions you've configured
• Number of Devices: Count of active devices on your account

4. How We Use Your Information

We use the limited information we collect only to:

• Authenticate you and provide access to the VPN Service
• Process payments and manage your subscription
• Generate VPN configuration files
• Send important service notifications (downtime, security updates)
• Respond to your support requests
• Enforce our Terms of Service
• Comply with legal obligations (only when legally required)

We never use your data for advertising, analytics, or marketing purposes beyond service-related communications.

5. Third-Party Services

5.1 Stripe (Payment Processing)

We use Stripe to process payments. When you subscribe, Stripe collects and processes:

• Payment card information
• Billing address
• Email address
• Transaction history

Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

5.2 Firebase (Authentication & Database)

We use Google Firebase for:

• User authentication (email/password, Google Sign-In)
• Storing account and subscription data
• Generating secure authentication tokens

Firebase's data handling is governed by Google's Privacy Policy.

5.3 Analytics

We use minimal analytics to understand service performance and improve user experience. We do NOT track individual user behavior or VPN usage.

6. Cookies and Tracking

Our website uses cookies only for:

• Authentication: Keeping you logged in to your account
• Session Management: Maintaining your session state
• Security: Protecting against cross-site request forgery (CSRF)

We do NOT use advertising cookies or third-party tracking cookies.

7. Data Security

We implement industry-leading security measures:

• Encryption in Transit: All connections use TLS 1.3
• Encryption at Rest: Database encryption for account data
• RAM-Only Logging: No persistent logs on VPN servers
• Automatic Data Deletion: Server logs wiped every 6 hours
• Password Security: Bcrypt hashing with salt
• Private Key Isolation: WireGuard private keys never leave your device

8. Data Retention

We retain your data as follows:

• Active Accounts: Account data retained while subscription is active
• Cancelled Accounts: Data deleted 90 days after final payment
• Payment Records: Retained for 7 years for tax/legal compliance (via Stripe)
• VPN Usage Logs: Automatically deleted every 6 hours (RAM-only storage)
• Support Tickets: Retained for 2 years after resolution

9. Your Privacy Rights

Depending on your location, you have the right to:

9.1 GDPR Rights (EU/EEA Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your account and data
• Data Portability: Export your data in machine-readable format
• Object to Processing: Object to how we use your data
• Withdraw Consent: Withdraw consent for data processing

9.2 CCPA Rights (California Users)

• Right to Know: What personal information we collect and why
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of data sales (Note: We do NOT sell data)
• Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, email us at privacy@youcantseemevpn.com

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Compliance with GDPR and CCPA requirements
• Encryption of data in transit and at rest

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via email.

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@youcantseemevpn.com
Support: support@youcantseemevpn.com
Website: https://youcantseemevpn.com