1. What this covers
This policy covers the sovpn.store website, the dashboard, the SoVPN apps and our VPN servers.
2. VPN activity we do not log
When you are connected to the VPN, we keep no record of:
- the websites and services you use
- what your traffic contains
- your DNS lookups
- the IP address you connect from
- when you connect or disconnect, or how long you stay connected
3. Account data
Your account is identified by your account token. We store a one-way hash of it, which is what we compare when you log in, and its last 4 characters, which help tell accounts apart. The full token is shown to you once, at sign-up.
We also keep a one-way hash of the IP address used to sign up, so the limit of 3 accounts per IP can be applied. We do not collect an email address, name, phone number or postal address, and we do not send email.
Support messages you send, and our replies, are kept so the conversation can continue.
If you buy proxies, we also store your proxy username and password and the IPv4 addresses on your allow list.
4. Payment data
For each top-up and purchase we record the amount, the coin, the date and the item, as well as your plan period.
Crypto payments are handled by PayGate. The checkout window is PayGate's page, and PayGate's terms apply there. We do not take cards or bank transfers, so card and bank details never reach us.
5. Device count
To enforce the device limit, the server keeps a marker while a device is connected. It only says that one slot on your account is in use. It holds no IP address or activity and is removed when the device disconnects.
6. Cookies
The website sets only its own cookies, and no third-party ones:
- so_sid, which keeps you signed in to the dashboard (30 days), and so_in, which only tells the page that you are signed in
- so_lang, which remembers the language you picked, and so_hint, which remembers that you closed the language suggestion
- ref_src, set on your first visit for 30 days, which notes whether you came from a link or directly
7. Ads and tracking
The website and apps have no advertising cookies, tracking pixels or third-party analytics. We do not sell your data or share it with advertisers.
8. Legal requests
We hand over account data only when the law requires it. Even then, we can only provide what sections 3 and 4 describe. Browsing and connection records do not exist.
9. How long we keep data
Account and payment records are kept for as long as the account exists. You can ask for your account to be deleted from the Support tab in the dashboard. Some payment records may be kept longer where the law requires.
10. Changes and questions
When this policy changes, we update the date at the top. Send any questions from the Support tab in your dashboard.