Privacy

We don't know what you do online. And we don't want to

What the service stores about you, why and for how long — and who else sees anything.

Updated:

We don't know which sites you visit

Neither the service nor the nodes record site addresses, DNS queries or the volume of your traffic. Anywhere.

We don't record who connected from where

There is no connection log: no IP address, no connect or disconnect times, no session length.

We don't keep your key

The database holds only a hash of your access key. Your device's private key never leaves your computer.

What we store for Premium

All of this appears only after you buy. The free version needs no account — more on that below.

Kept while the key exists. Where it's different, it says so.

Account

  • A hash of the key and its start, e.g. VL-7K3M

    To check the key. Support can find your account by the start, but it can't be used to sign in.

  • Plan and subscription dates

    To know whether it's active.

  • Email

    For your key, sign-in codes, renewal reminders and support replies.

Devices

  • The device's public key and its address in the Veli network

    A node only admits keys it knows.

    While the device is linked

  • Device type: Windows, Mac or phone model

    So the cabinet shows what to unlink.

    While the device is linked

  • When the app last checked in

    So the cabinet shows which devices are alive. It's not when you connect to the VPN, and not your IP.

    One mark, overwritten

  • Which servers your key sees

    A key sees only part of the network, so if it leaks, the rest stays hidden.

Payment

  • Plan, amount, date and payment method

    For sales records and refunds.

  • Telegram ID and name — if you bought in Telegram

    To deliver and renew the key right in the chat.

  • Transaction hash — if you paid in crypto

    To find your transfer.

  • Who invited whom

    To credit bonus days.

  • A switch compensation claim: previous VPN, email and screenshot

    To add the days and see where people come from. Only the screenshot's file name and size remain.

    Screenshot — until we decide

  • A partner's promo code, if you entered it or came through a link with it: whose it is, how it arrived (link, field, bot) and whether it gave a gift

    To give you the gift and pay the partner their share. The partner sees only a count of purchases, not you; anything that isn't shaped like a promo code isn't kept.

Support and sign-in

  • Support requests and diagnostics, if you attached them

    To answer and sort things out. Diagnostics are versions, settings and app events, with no site addresses.

  • Sign-in codes and cabinet sessions

    For signing in to the cabinet on the website.

    A day after they expire

Want your account deleted? Write to support from the email the key was issued to — we'll delete it along with all its data.

The free version

No sign-up, no account. Profiles, keys and connection history live only on your computer. The app tells us only what an update check needs: platform and version number. If you connect to your own server, its logs are up to you and your host.

Who else sees anything

We don't sell your data and don't pass it to anyone but the services in this table, for anything but what it says. Some of them are unavoidable, but each gets the bare minimum and knows nothing about your account.

  • ServiceCloudflare (DNS 1.1.1.1)
    What it getsNames of sites you open — but from the node's address, not yours
    WhenAlways while connected to Premium
  • ServiceEmail provider
    What it getsYour address and the letter: key, sign-in code, reminder, support reply
    WhenWhen we write to you
  • ServiceTelegram
    What it getsThe purchase and payment
    WhenIf you buy in the Telegram bot
  • ServiceBlockchain
    What it getsThe transfer to our wallet — public, like any transaction
    WhenIf you pay in crypto. No payment intermediaries
  • ServiceGoogle
    What it getsOnly your email
    WhenIf you sign in to the cabinet with Google
  • Serviceipwho.is, ipapi.co, ipify.org, bash.ws, speed.cloudflare.com
    What it getsYour IP and DNS servers, or test traffic
    WhenOnly when you check your IP, run the leak test or the speed test yourself. With VPN they see the node's address
  • Serviceipwho.is
    What it getsYour servers' addresses — to place them on the map
    WhenOnce per server, then from cache
  • ServiceGitHub
    What it getsA request to download site lists
    WhenIf the “Russia” routing mode is on, once a day

No telemetry

The app has no analytics, no crash reports and no “anonymous usage statistics”. No ad network SDKs. A diagnostics report is sent only with a support request, and only if you tick the box.