Privacy Policy
1. Introduction
OrbitSafe VPN ("we," "our," or "us") is a VPN service built to protect privacy and support a free and open internet. This Privacy Policy explains what information we collect, what we do not collect, how we use information, and the choices you have when you use our apps and website.
2. Core Principles
- No activity logging: We do not collect or store your browsing history, DNS queries, traffic contents, or the destinations you connect to while using the VPN.
- Data minimization: We collect only the information that is necessary to operate the service, provide support, process subscriptions, and improve reliability.
- Transparency: We aim to describe our practices clearly and update this policy when our service changes.
3. Data We Do Not Collect
We do not collect, store, or sell the following:
- Your browsing history
- DNS queries
- Traffic contents (the content of what you do online)
- IP addresses of websites/services you access while connected
- Your source IP address when you connect to the VPN service
We do not collect or store persistent VPN activity logs that can be used to identify individual user activity, such as browsing history, DNS queries, or traffic contents.
We may process minimal operational data such as connection timestamps (start and end time), which are not linked to browsing activity and are used solely for maintaining service functionality and preventing abuse.
4. Data We Do Collect
We may collect the following categories of information:
- Account information: If you create an account, we may collect your email address (or another identifier you provide) to manage access and communicate essential service messages.
- Payment information: Subscription payments are processed by the Apple App Store (and/or other store providers, if applicable). We do not receive or store your full payment card number. We may receive limited purchase information such as transaction status, product identifier, and timestamps related to the purchase.
- Support communications: If you contact support, we receive the information you choose to share (for example, your email address and the content of your message) to resolve your request.
5. Technical Privacy Measures
- Strong encryption: We use modern VPN protocols (for example, WireGuard®) to encrypt traffic between your device and our servers.
- Privacy features: Depending on the platform/version, features may include kill switch, private DNS, and split tunneling.
- Operational safeguards: We design our systems to minimize data exposure and limit access to operational data to authorized personnel only.
6. Website Operation and Cookies
Our website may use cookies or similar technologies for essential functionality and optional analytics.
- Optional analytics: We may measure anonymous site usage (for example, pages visited and time spent) to improve the website. Where possible, analytics are configured to avoid collecting identifying information.
- Marketing measurement: If we run advertising campaigns, third-party providers may use pixels/tags to measure campaign performance. We do not provide these services with VPN activity data.
- Forms and anti-abuse: If we use CAPTCHA or anti-spam protection, those providers may collect data according to their own privacy policies.
7. Third-Party Services
To operate the service and website, we may use third-party providers. These providers process data under their own privacy policies and our agreements with them.
- App stores & payments: Apple (and other app store providers, if applicable) processes purchases and subscriptions.
- Support tooling: If we use a support platform (for example, a ticketing system), it may process your support messages and email address.
- Diagnostics/analytics: If enabled, tools may receive crash reports and aggregated product analytics (for example, error traces and app version).
- Infrastructure: Hosting, CDN, DNS, and security services may process basic request metadata for website delivery and protection (for example, IP addresses for web traffic to our site).
8. Data Storage and Retention
We retain personal data only as long as needed for the purposes described above, including providing the service, complying with legal obligations, resolving disputes, and enforcing agreements.
- Account data: stored while your account is active, and then deleted or anonymized within a reasonable period (unless a longer period is required by law).
- Support data: stored as long as necessary to resolve your request, then deleted or anonymized.
- Diagnostic data: may be retained longer in aggregated/anonymized form for performance analysis.
- VPN activity logs: we do not keep browsing logs; therefore, there is no browsing history to retain or delete.
9. Your Rights
Depending on where you live (for example, under GDPR or similar laws), you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing.
You can submit requests using the contact details below. We may need to verify your identity before processing certain requests.
10. Data Sharing
We do not sell your personal data. We may share limited information only in the following cases:
- Service providers: with vendors that help us run the service (e.g., payment processors/app stores, support tooling, hosting/security providers), under confidentiality and data protection obligations.
- Legal requirements: if required by law, regulation, or valid legal process. If we receive a request, we respond only with the information we have.
- Safety and abuse: to protect users, prevent fraud/abuse, and maintain the security of our systems.
11. Jurisdiction and Server Locations
OrbitSafe VPN operates from jurisdictions and vendors that may process data in different countries. Where applicable, we use appropriate safeguards for international data transfers as required by law.
Our VPN server infrastructure is currently located in:
- New York, United States
- Frankfurt, Germany
- Amsterdam, Netherlands
User data required for service operation (such as account information) may be processed in these locations or in other jurisdictions where our infrastructure providers operate, in accordance with applicable data protection laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. If changes are significant, we may provide additional notice (for example, in-app or by email).
13. Contact
For privacy questions or data requests, contact us at: