Scope and processing principles
This policy applies to data generated when visiting the VPNSM website, using the user panel, creating an account, placing an order, opening a support ticket or establishing a network acceleration connection. Data processing is limited to delivering subscriptions, maintaining account status, operating the service, handling payments and refunds, and responding to user requests. Network activity is not used for advertising profiles.
VPNSM limits data collection to what is necessary and handles account data, website analytics and temporary technical data from network connections separately. Each data type is used only for its stated purpose and is not combined for convenience into a browsing profile.
Data scope and purposes
Registration does not require an email address; a username and password are sufficient, so an email address is not required to create an account. The system stores the username, secure password verification results, plan status, summarized traffic usage and account activity records for authentication, subscription delivery, quota calculation and account security. If a user voluntarily provides an email address in a support ticket, it is used only to handle that request.
Order records include the order identifier, selected item, amount, payment status, refund status and related timestamps. They are used to confirm transactions, activate services, reconcile accounts and handle disputes. Website analytics may process visited pages, referrer pages, browser type, device category, visit time, approximate region and necessary security request information to understand site performance, investigate anomalies and improve content. This website analytics data is separate from activity on network acceleration connections.
No-logs and connection data
VPNSM follows a no-logs policy. It does not record which websites users visit, retain browsing content, application communications or browsing history that could reconstruct network activity, or maintain long-term connection records linking specific destinations to an account.
When a connection is established, the system may temporarily process route selection, connection status, error details and traffic counts during the current session to transmit data, calculate plan usage and diagnose connection issues. Session-level temporary state is removed when the connection ends or the necessary summary is completed, and is not retained as a browsing profile. Traffic summaries stored in an account are used only for plan management and cannot reconstruct specific browsing content.
Cookies and local storage
The website and user panel use necessary cookies or browser local storage to maintain login status, save language preferences, support page navigation, record essential security state and prevent duplicate submissions. An authentication token may be stored in the current browser's local storage to maintain the account session until the user actively logs out.
Users can clear cookies and local storage through their browser settings. After clearing them, login status, language preferences and some interface settings may need to be restored. Restricting necessary storage may affect user panel login, order submission or access to subscription information.
Payment processing and data retention
Payments through Alipay, WeChat Pay and USDT are processed by the relevant third-party payment services. During payment, those providers may handle payment account information, transaction identifiers and risk-control data under their own policies. VPNSM receives the payment result needed to complete an order and stores the related order status, amount and refund records. It does not directly control the independent data processing activities of third parties.
Account details are retained while the account remains in use. Order and refund records are retained for as long as needed to complete transactions, reconcile finances, handle disputes and comply with applicable rules. Support ticket content is retained for the period needed to provide support and conduct follow-up checks. Website analytics are deleted, aggregated or de-identified after the relevant analysis or security purpose is complete. When the retention purpose ends, related data is deleted or converted into a form that cannot identify a specific user.
User rights and policy updates
Users can view and manage account information in the user panel. To correct information, delete an account, remove information voluntarily provided in a support ticket or ask questions about data processing, users can submit a ticket through the user panel. After receiving a request, VPNSM verifies account ownership and processes it. Information that must be retained for transaction records, dispute handling or applicable rules is deleted or de-identified when the relevant purpose ends.
This policy may be updated as service processes, technical measures or applicable rules change. The revised text will be published on this page, and the last-updated date at the top will be changed. Important changes to data processing may also be announced through the website or user panel. Updates apply to subsequent data processing activities after publication.