Privacy Policy

1. Who we are

XPASS VPN sells prepaid VPN passes. The operating company and registered address are [to be confirmed]. You can reach us at xpassvpn@gmail.com.

2. What we hold

When you buy and use a pass we hold the following:

• Your email address, collected by Stripe Checkout when you pay.
• Order records: the pass you bought, amounts, dates and status.
• Payment status reported by Stripe. We never see or store full card numbers.
• Your IP address, used for fraud prevention and rate limiting.
• Your VPN account username and encrypted password.
• Support tickets and the messages you send us.
• Essential cookies (session, checkout claim, language). See the Cookie Policy.
• A first-party attribution cookie (xp_ft, 30 days) that records the first page you landed on, the referring website name and any campaign tags (utm_*) so we can tell which pages lead to purchases; it holds no IP address or personal data and is not shared with third parties.

3. Why we use it

We use this information to take payment, create and deliver your VPN account, show it on your My Pass page, provide support, prevent fraud and abuse, and meet our legal obligations.

4. Who else handles data

• Stripe processes your payment and collects your email at checkout, under its own privacy policy.
• Our VPN network provider supplies the VPN network. We pass it the details needed to create and manage your VPN account.
• Hosting and infrastructure providers that run this website: [to be confirmed].

5. VPN traffic

We do not claim that the service keeps no logs. What we store is described in this document. The traffic you send through the VPN travels on our VPN network provider's network, and that provider's own practices and policies apply to it. Details of what the provider records: [to be confirmed].

6. How long we keep data

Retention periods for orders, tickets, IP addresses and VPN accounts: [to be confirmed].

7. Your choices

You can ask us to access, correct or delete the personal data we hold about you by emailing xpassvpn@gmail.com. Legal rights depend on where you live; the rights we will support: [to be confirmed].

8. Changes

We may update this draft. The date at the top shows the latest revision.