Country rules
Last updated: 5 September 2026
A VPN operator is subject to the law of the places it serves. Rather than publish a single vague sentence, here is the actual schedule the system enforces. Your country is the one you declare at sign-up; it decides retention only, never which servers you may use.
Retention of session allotment rows
A session allotment row records which internal tunnel address was issued to your account, on which node, and when. It contains no browsing data, because none is collected.
| Jurisdiction | Session rows kept | Basis |
|---|---|---|
| India (IN) | 5 years | CERT-In directions on subscriber and address allotment records |
| Indonesia (ID) | 180 days | Operational-log expectations under the electronic systems regime |
| EU / EEA | 90 days | GDPR data minimisation |
| United Kingdom (GB) | 90 days | UK GDPR |
| United States (US) | 90 days | Operator practice; state privacy laws |
| Brazil (BR) | 90 days | LGPD minimisation |
| Singapore (SG) | 90 days | PDPA |
| Türkiye (TR) | 90 days | KVKK |
| AE · SA · QA · OM · KW | 90 days | Local telecommunications and data protection rules |
| Anywhere else | 90 days | Default minimum |
Subscriber data after you close the account
In most markets, deleting your account erases your personal data immediately. India is the exception: CERT-In requires an operator to keep a subscriber snapshot for five years after cancellation, so an account declared in India retains that snapshot even after deletion. Everywhere else the retention period after closure is zero.
What is never retained, anywhere
No jurisdiction on this list changes the following. None of it is collected in the first place, so no retention period applies:
- Browsing history · DNS queries · destination IPs and hostnames
- TLS SNI · packet payloads
- The source IP your access provider assigned you while the tunnel is up
Requests from authorities
We respond to valid legal orders with what exists: an email address, a plan, and — where the retention period still covers it — the fact that a tunnel address was issued at a given time. We do not reconstruct traffic we never recorded, and we do not create new collection in response to an informal request.
This page describes how our system behaves. It is not legal advice, and operators in regulated markets should confirm their own obligations with counsel.