Account Data and How It Is Used
You can create a VPNLay account without an email address using only a username and password. The username identifies your account, links it to your subscription and helps us handle support requests. Passwords are stored as irreversible hashes, never in plain text. Do not include personal data unrelated to the service in your username or support ticket.
An email address is not required to create an account. If you choose to provide one during a support conversation, it will be used only to respond to your request. Support tickets are retained with the issue description and any attachments you choose to upload. Before submitting screenshots, conceal passwords, sensitive payment details and subscription links.
No-Logs Practices and Connection Data
VPNLay follows a no-logs policy: it does not record which websites users visit or retain browsing history, visited content or DNS query history, and it does not create a record linking an account to the websites it accesses.
Temporary session data needed to maintain a connection is used only while the connection is being handled and is released when the connection ends. It is not kept as a persistent connection log. Cumulative traffic used for billing and subscription status are account usage data and do not include specific destinations.
Website and user panel analytics are handled separately from network connection data. Analytics help us understand page visits, entry points and feature errors, and may include page paths, visit times, browser types and referring pages. Passwords, authentication credentials and subscription links must not be included in analytics data.
Cookies and Local Storage
Cookies and browser local storage help maintain login sessions, save interface preferences and support essential security checks. Analytics may also use browser identifiers to distinguish visits and reduce duplicate counts. These uses do not involve recording browsing content within the subscription service.
You can restrict cookies, clear site data or delete local storage in your browser settings. Doing so may require you to log in again and may reset some preferences. Logging out and clearing local data do not replace deleting your server-side account. On a shared device, log out and clear site data when you are finished.
Order Records and Third-Party Payments
Order records include the selected plan, amount, payment status, transaction reference and any refund processing. They are used to activate subscriptions, reconcile payments and handle disputes. VPNLay supports Alipay / WeChat Pay / USDT; payments are processed by the relevant third-party payment services.
Third parties handle payment data according to their own policies. VPNLay receives the payment result needed to verify an order and does not ask users to provide payment account passwords in support tickets. Account data is not used for unrelated purposes or sold, except as needed to provide the service, for necessary technical processing or to comply with valid legal requests.
Retention Periods and Deletion Requests
Account data is retained for as long as needed to provide subscriptions and manage accounts. Order and refund records are retained as required for service fulfillment, financial reconciliation, dispute handling and applicable law. Support tickets and analytics are kept only until their purposes are met, not indefinitely, and are deleted or anonymized when no longer needed.
Log in to the user panel and use a support ticket to request access to, correction of or deletion of your data. VPNLay will verify account ownership and explain the scope of processing, including records that must be retained by law. Deleting an account may make subscriptions and historical records unavailable. Clearing browser data does not automatically delete server-side data.
Data Protection and Policy Updates
VPNLay uses access controls, encrypted transmission and credential safeguards to reduce the risk of data exposure. Keep your password and subscription links secure. If you discover a leak, update the relevant credentials promptly and describe the situation in a support ticket.
When this policy changes, this page and the month shown at the top will be updated. Important changes to processing purposes or user rights will be announced on the website or in the user panel. Where required by law, consent will be requested separately. For privacy questions, visit the support page to find contact options. See the Terms of Service for subscription rules.