Privacy
We don't know what you do online. And we don't want to
What the service stores about you, why and for how long — and who else sees anything.
Updated:
We don't know which sites you visit
Neither the service nor the nodes record site addresses, DNS queries or the volume of your traffic. Anywhere.
We don't record who connected from where
There is no connection log: no IP address, no connect or disconnect times, no session length.
We don't keep your key
The database holds only a hash of your access key. Your device's private key never leaves your computer.
What we store for Premium
All of this appears only after you buy. The free version needs no account — more on that below.
Kept while the key exists. Where it's different, it says so.
Account
A hash of the key and its start, e.g. VL-7K3M
To check the key. Support can find your account by the start, but it can't be used to sign in.
Plan and subscription dates
To know whether it's active.
Email
For your key, sign-in codes, renewal reminders and support replies.
Devices
The device's public key and its address in the Veli network
A node only admits keys it knows.
While the device is linked
Device type: Windows, Mac or phone model
So the cabinet shows what to unlink.
While the device is linked
When the app last checked in
So the cabinet shows which devices are alive. It's not when you connect to the VPN, and not your IP.
One mark, overwritten
Which servers your key sees
A key sees only part of the network, so if it leaks, the rest stays hidden.
Payment
Plan, amount, date and payment method
For sales records and refunds.
Telegram ID and name — if you bought in Telegram
To deliver and renew the key right in the chat.
Transaction hash — if you paid in crypto
To find your transfer.
Who invited whom
To credit bonus days.
A switch compensation claim: previous VPN, email and screenshot
To add the days and see where people come from. Only the screenshot's file name and size remain.
Screenshot — until we decide
A partner's promo code, if you entered it or came through a link with it: whose it is, how it arrived (link, field, bot) and whether it gave a gift
To give you the gift and pay the partner their share. The partner sees only a count of purchases, not you; anything that isn't shaped like a promo code isn't kept.
Support and sign-in
Support requests and diagnostics, if you attached them
To answer and sort things out. Diagnostics are versions, settings and app events, with no site addresses.
Sign-in codes and cabinet sessions
For signing in to the cabinet on the website.
A day after they expire
Want your account deleted? Write to support from the email the key was issued to — we'll delete it along with all its data.
The free version
No sign-up, no account. Profiles, keys and connection history live only on your computer. The app tells us only what an update check needs: platform and version number. If you connect to your own server, its logs are up to you and your host.
Who else sees anything
We don't sell your data and don't pass it to anyone but the services in this table, for anything but what it says. Some of them are unavoidable, but each gets the bare minimum and knows nothing about your account.
- ServiceCloudflare (DNS 1.1.1.1)What it getsNames of sites you open — but from the node's address, not yoursWhenAlways while connected to Premium
- ServiceEmail providerWhat it getsYour address and the letter: key, sign-in code, reminder, support replyWhenWhen we write to you
- ServiceTelegramWhat it getsThe purchase and paymentWhenIf you buy in the Telegram bot
- ServiceBlockchainWhat it getsThe transfer to our wallet — public, like any transactionWhenIf you pay in crypto. No payment intermediaries
- ServiceGoogleWhat it getsOnly your emailWhenIf you sign in to the cabinet with Google
- Serviceipwho.is, ipapi.co, ipify.org, bash.ws, speed.cloudflare.comWhat it getsYour IP and DNS servers, or test trafficWhenOnly when you check your IP, run the leak test or the speed test yourself. With VPN they see the node's address
- Serviceipwho.isWhat it getsYour servers' addresses — to place them on the mapWhenOnce per server, then from cache
- ServiceGitHubWhat it getsA request to download site listsWhenIf the “Russia” routing mode is on, once a day
No telemetry
The app has no analytics, no crash reports and no “anonymous usage statistics”. No ad network SDKs. A diagnostics report is sent only with a support request, and only if you tick the box.