Privacy Policy

1. Zero-Logs Policy Guarantee

We operate under a strict no-logs policy. When you use our VPN service, we do not monitor, record, log, store, or pass to any third party your internet browsing activity, IP addresses (either origin or assigned VPN IPs), timestamps, bandwidth usage, or DNS queries.

2. The Information We Collect

We only collect the absolute minimum information necessary to provide the service:

• Account Data: Email address and hashed website password for dashboard access.
• VPN Credentials: The VPN username and password you use to sign in to the App, so we can authenticate you and establish the connection.
• Payment Data: Processed entirely via Stripe. We do not store your card details on our servers.
• Subscription Status: Dates of subscription creation and expiry to manage your access.

The App does not collect your device location, contacts, photos, messages, or advertising identifiers, and contains no third-party advertising or analytics tracking. We do not track you across apps or websites owned by other companies, and the App does not request permission to do so.

3. Mobile & Desktop Applications

Specific to the App:

• On-device credential storage: Your VPN username and password are stored securely on your own device using the operating system’s protected keystore (Android Keystore / Apple Keychain / OS secure storage). They are transmitted only over an encrypted (HTTPS/TLS) connection to authenticate you.
• VPN connection: While connected, the App runs a foreground service (Android) or network extension (iOS/macOS) and shows an ongoing status notification to keep the encrypted VPN tunnel active. It stops when you disconnect. We do not inspect, log, or record the contents of your traffic.
• Permissions: The App requests the VPN permission (to create the tunnel), network state, and notification permission (for the connection status). It does not request access to your personal files, location, or contacts for its core function.
• No ads, no third-party tracking: The App displays no advertising and includes no third-party analytics or tracking SDKs.

4. How We Secure Your Data

All website and API traffic is encrypted using TLS. Your VPN credentials are obfuscated via AES-256-GCM encryption and, due to our decoupled provisioning architecture via the VPNResellers infrastructure, cannot be used to trace traffic back to your personal identity.

5. Third-Party Services

We use a small number of third parties strictly to operate the service; they act as our processors and do not receive your browsing traffic:

• Stripe — payment processing (card details are handled by Stripe, not stored by us).
• VPNResellers — the underlying VPN network infrastructure that provisions and runs the VPN accounts.
• Apple and Google — app distribution via the App Store and Google Play. Their handling of your data is governed by their own privacy policies.

6. Data Retention and Deletion

You may request complete deletion of your account at any time from your account dashboard or by contacting support at support@clearcodevpn.co.uk. Upon account deletion, all associated billing references, email addresses, and VPN connection configurations are purged from our database immediately and irreversibly.

7. Children’s Privacy

The service is not directed to children under 13, and we do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notice within the App.

9. Governing Law

This Privacy Policy is governed by the laws of the United Kingdom. ClearCode Digital LTD operates in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

10. Contact Us

For any privacy questions or to request data deletion, contact us at support@clearcodevpn.co.uk.