Privacy Policy
Last updated: March 2026
Last updated: March 2026
Minimal by design. Sign-in uses private access tokens — no passwords, and an email is optional (only if you want recovery links). We never collect names, phone numbers, device identifiers, or browsing data. Debit/credit card payments are processed directly by our certified payment partners; your full card number never reaches our servers.
No. We keep no activity logs: we never record websites visited, transmitted content, DNS queries through the tunnel, or your real IP address. Our servers operate under a strict no-logs policy. We store no connection history in logs — neither on our side nor on yours. If you use the browser as your client, we recommend private tabs and similar tools so nothing is saved on your device.
We never sell or hand over your data to advertising networks or data brokers. The only third parties involved in the service are our hosting providers (who run servers under a no-logs policy and never see tunnel contents) and our certified payment partners (who process payments directly — we receive only a confirmation, not your card details).
No third-party analytics trackers. No advertising cookies placed on your device.
NullVPN uses passwordless authentication — there are no passwords to steal, leak, or reuse across services. Your device receives a private access token; email delivery is optional and used only to help you recover your token.
We minimize what is needed to run accounts, subscriptions, payments, security, and support. Here is the honest, itemized picture instead of slogans.
| Data | Where it lives | Why | Retention |
|---|---|---|---|
| Traffic content and browsing activity | Not retained — tunnel exits run without traffic or connection logs | — | Nothing to retain |
| Account identifier (private access token, optional email) | NullVPN account backend | Authentication, subscription binding, recovery links | Life of the account |
| Payment confirmation (amount, method, transaction reference) | Certified payment partners; NullVPN sees only a success confirmation | Reconciliation and refunds | Per provider policy and accounting rules |
| Approximate traffic volume per billing period | NullVPN backend | Plan operation and abuse prevention | Billing period |
| Connection events log | Your own device only — a local ring buffer that is never uploaded | Troubleshooting, if you choose to share it | Local, rotates on your device |
| Bot session state (only if you use the Telegram bot) | Telegram; the cabinet stores account and subscription state | Delivery and support | Until deleted |
Telegram (account delivery and support, telegram.org), certified payment partners for card/crypto processing (named at checkout — we never receive your card details), and the hosting provider that runs our endpoints. A complete, up-to-date processor list is available on request via Telegram.
This table describes the current architecture; if practices change, this page changes first.