Last updated: September 2026

Privacy Policy

This policy applies to the VPNHW website, user panel, and subscription services. It explains what data is handled when the service provides cross-border access, international routes, and account management features, why it is processed, how long it is retained, and how users can request access or deletion. Please read these terms before using the service.

Account and Order Data

An email address is not required during registration and is not mandatory account information. An account can be created with a username and password. The system stores the username and password verification result used for authentication to support sign-in, account protection, plan identification, and ticket association. Text, attachments, and other materials submitted by users in a ticket are used only to address the related issue.

When a subscription or data package is purchased, the system creates an order record containing the selected item, order amount, payment status, creation and completion times, and necessary transaction identifiers. These records are used to deliver the service, verify payment, process refunds, resolve order disputes, and meet applicable financial obligations. Data usage is also processed to enforce plan allowances, reset rules, and data package balances.

Access Analytics and No-Logs Position

The website may process basic access analytics, such as visited pages, browser type, device category, referring page, network address, and error information. This data is used to identify page failures, assess feature usage, and maintain service security. Analytics results are kept aggregated or de-identified where possible and are not used to build personal interest profiles.

VPNHW follows a no-logs policy: it does not record which websites users visit, retain web content, or create a browsing destination history tied to usernames. During operation, temporary technical information such as connection status, error events, and resource usage may be generated for route scheduling, troubleshooting, and abuse handling. Connection logs are not retained long term; once the processing purpose is complete, related temporary information is deleted or de-identified. Diagnostic materials submitted by users are handled as ticket data.

Cookies and Local Storage

The website and user panel may use Cookies or browser local storage to save sign-in status, language preferences, interface settings, and necessary session identifiers. This data keeps users signed in, restores their choices, and maintains panel functionality. It is not used to sell personal information. Limiting or clearing browser storage may restore some preferences to their defaults and may invalidate the sign-in status.

Session credentials should be stored only on the user's own device. After using a shared device, users should sign out and clear local data that is no longer needed. Browser storage management features can be used to view, limit, or delete related content.

Third-Party Payment Processing

The service supports Alipay / WeChat / USDT. Payments are handled by the applicable third-party payment service, which may collect payment account, transaction verification, and risk-control information under its own rules. VPNHW does not control the third party's independent data processing activities; users should also review the privacy rules of the selected payment service.

VPNHW receives the payment result, transaction identifier, and status information needed to complete an order and associates it with that order. Account credentials and verification materials handled directly by the payment service are not stored as VPNHW registration data. In the event of a refund or payment dispute, necessary order information may be checked between the service and the relevant payment service.

Data Retention, Security, and Deletion

Account data is retained while the account remains active and for as long as needed to provide the service. Order records are retained for as long as needed to process payments, refunds, disputes, and applicable obligations. Access analytics are aggregated, de-identified, or deleted after operational analysis is complete; temporary connection-related technical information is handled according to the no-logs principles described above. Data in backups is overwritten through the normal backup update process.

The service uses access controls, transmission protection, and separated permissions to limit data access. Users can use the ticket portal in the user panel to request access to, correction of, or deletion of data associated with their account. To verify account ownership, users may be asked for necessary information related to the account or an order. Order or dispute records that must be retained by law may be deleted after the relevant obligation ends.

Data Sharing and Policy Updates

Account and order data is shared only as needed to provide subscription services, complete payments, maintain system security, handle tickets, or meet applicable obligations. Service providers may process data only within the scope needed for their assigned work and must comply with relevant data protection requirements. If the business structure changes, related data processing remains subject to this policy and applicable rules.

This policy may be updated when service processes, technical implementation, or applicable rules change. The updated text will be published on this page with the month of the latest update. Changes that materially affect data processing may also be noted through the user panel. Before continuing to use the service, users can review the updated policy and decide whether to keep their account.