Privacy Policy

Collection Scope and Processing Purposes

No email address is required during registration. A username and password are sufficient, so 23VPN does not treat a registration email as required data. The system stores the username, securely processed authentication information, account status, and subscription status for login verification, service delivery, account recovery, and the detection of unusual activity.

After an order is completed, the system retains the plan or traffic package type, payment status, transaction identifier, order time, refund status, and necessary accounting records. This information is used to confirm orders, activate subscriptions, process refunds, resolve payment disputes, and meet applicable financial obligations. Questions, attachments, or other materials submitted by users through support tickets are used only to respond to the request and maintain service records.

The marketing website may record page visits, referral pages, browser type, device type, and basic error information to assess site operation, address compatibility issues, and improve content structure. This website analytics data is handled separately from network activity transmitted through subscription routes.

No-Logs Position and Network Data

23VPN does not record which websites users access through international routes, or retain browsing content, transmission content, DNS queries, or history that could reconstruct specific network activity. The service does not create activity profiles linking user identities with access destinations.

Connection logs are not retained as long-term records. To support live connections, traffic accounting, and troubleshooting, the system may temporarily process necessary technical status information during operation. Once that status is no longer needed for operation, it is cleared or aggregated. Aggregated results are not used to reconstruct an individual user's access destinations. Used traffic shown in an account is used to enforce the plan and does not include browsing content or website lists.

If a service issue occurs, users may voluntarily provide client error information through a support ticket. Before submitting it, users should check whether it contains anything they do not want to disclose. Ticket materials are used only to investigate the reported issue.

Cookies and Local Storage

The website and user panel may use Cookies or browser local storage to save login status, language preferences, interface settings, and necessary session information. These features maintain sessions, restore user choices, and support page functions; they are not used to build cross-site advertising profiles.

Users can clear Cookies and local storage through browser settings. After clearing them, login status and some preferences may need to be configured again. Disabling necessary storage may prevent the user panel from maintaining a session or completing the order process correctly.

Payment Processing and Data Boundaries

The service supports Alipay, WeChat, and USDT. Payment instructions are handled by the relevant payment channel, service provider, or network processor, each of which maintains its own privacy rules. 23VPN receives the payment result, transaction identifier, order amount, and status information needed to complete an order. It does not receive or store the complete authentication credentials for third-party payment accounts.

Payment data is used only for order verification, subscription delivery, accounting reconciliation, refunds, and dispute handling. Information sent to payment processors is limited to what is necessary to complete the transaction. Before submitting information on a third-party page, users should also review the privacy notice provided by that processor.

Data Retention, Deletion, and Policy Updates

Account data is retained while the account remains active and for as long as needed to provide subscription services. Order and payment results are kept for the periods needed for fulfillment, refunds, dispute handling, and applicable obligations. Once those purposes end, the data is deleted, de-identified, or aggregated. Website analytics and troubleshooting information is retained only as long as needed for analysis and maintenance and is not used as a record of network access.

Users can sign in to the user panel and submit a support ticket to request access to, correction of, or deletion of account data. After receiving a request, 23VPN first verifies control of the account and then processes information eligible for deletion. Records still needed for an incomplete order, refund, dispute, or applicable obligation will be handled under this policy after the relevant matter ends. Deleting account data may make subscriptions, order lookup, and client downloads unavailable.

This policy may be updated when service processes, technical implementation, or applicable rules change. The revised text will be published on this page, and the last-updated month at the top of the page will be adjusted. Important changes to data processing will be explained through available notices on the site. Users should review the version in effect before continuing to use the service.