Data We Collect and Why We Process It
ZVVPN processes only the account data needed to provide the service. No email address is required to create an account; a username and password are enough. The system stores the username, securely processed password credentials, and information needed to maintain account status. Passwords are never stored in directly readable form. Content that users submit voluntarily in a ticket is also retained as needed to handle that request.
To manage subscriptions, the system stores order records, selected items, payment status, transaction identifiers, remaining traffic balance, and service status. This information is used to confirm payments, deliver subscriptions, process plan changes, review refund requests, and investigate order issues. Order records are not used to analyze which websites users visit.
The website also generates necessary access analytics, such as page view events, referring pages, language settings, browser and device categories, and page error information. These analytics help verify that pages work properly, improve navigation, and identify unusual requests. Analysis focuses on aggregated results and is not used to build personal browsing profiles.
No-Logs Policy and Connection Records
ZVVPN does not record which websites users access through international routes, or retain destinations, DNS query contents, transferred content, or connection logs that could be used to reconstruct specific browsing activity. Temporary technical status required to operate the routes is used only for the current connection and troubleshooting, and is not retained as activity history after the connection ends.
Traffic balance, subscription status, and order status in an account are billing and delivery data, not browsing logs. Because the service does not create connection logs that can be traced to specific access activity, such logs have no retention period and cannot be used to provide a history of websites visited. When technical issues occur, support may ask users to voluntarily provide client error details; unrelated content can be removed before submission.
Cookies and Local Storage
The website and user panel use cookies or browser local storage to retain login sessions, interface language, necessary security status, and basic preferences. These tools keep users signed in, restore page state, and reduce repeated actions. After this data is disabled or cleared, public pages remain available, but the login state, language preference, or some panel actions may need to be configured again.
Authentication information in local storage is used only to identify the signed-in account in the current browser. When using a shared device, users should sign out and clear saved browser data after finishing. ZVVPN does not use these storage items to record the specific content users access through international routes.
Third-Party Payments and Data Sharing
ZVVPN supports Alipay / WeChat / USDT. Payment processing may be handled by the relevant payment provider, whose privacy rules and security measures are established independently. ZVVPN typically receives the transaction identifier, payment result, and amount status needed to complete an order, but does not receive or store complete payment credentials held by the payment provider.
Except where necessary to complete payments, operate the site, handle user requests, or comply with applicable requirements, ZVVPN does not provide account data to unrelated parties. Providers handling infrastructure or technical support may process data only within the scope required for their assigned work and must follow applicable confidentiality and security requirements.
Data Retention, Deletion, and Policy Updates
Account data is retained while the account remains in use. Order and transaction records are kept for as long as needed to complete services, handle disputes, and meet applicable financial requirements. Access analytics and error information are retained only as long as needed for analysis and maintenance, then deleted or converted into aggregated data that cannot be linked to a specific account. Ticket content is managed according to operational and compliance needs after the request and any necessary follow-up review are complete.
Users can sign in to the panel and use the ticket center to request access to, correction of, or deletion of account data. After a deletion request, data that can be removed directly is deleted from business systems. Order or transaction records that must be retained by law are restricted to permitted purposes and handled after the relevant obligation ends. To prevent unauthorized action by another person, the system may first require account verification.
This policy may change as service processes, technical implementation, or applicable requirements change. Updated versions will be published on this page, and the last-updated month at the top will be revised accordingly. Important changes to processing purposes or user rights will be explained in a visible notice on the site. Users can review the version in effect before continuing to use the service.