Privacy Policy

Account and Order Data

VPNSteam does not require an email address; you can create an account with a username and password. An email address is optional and is not a condition for opening an account. Account authentication involves processing your username, password verification information, and login status to identify your account, protect access, and provide your subscription.

Order records include the selected plan, payment amount, order status, transaction reference, and subscription entitlements. They are used to confirm payment, process refunds, and reconcile invoices. Total data usage is used to calculate plan allowances and does not include specific browsing activity. When you submit a support ticket, its description and any attachments you choose to upload are used to investigate the issue. Do not submit passwords, complete subscription URLs, or sensitive information from payment credentials.

Anonymous No-Logs Policy

The subscription service's privacy position is based on anonymity and a no-logs policy. VPNSteam does not record which websites users visit, store browsing or request content, or retain DNS query history that could be used to reconstruct browsing activity. It does not keep historical records linking accounts to browsing destinations.

The service does not persistently retain connection logs, including combinations of source addresses, connection times, and browsing destinations that could be used to trace an individual's sessions. Temporary session state needed to operate a connection is used only for current communications and is not kept as connection history after the session ends. Account, order, and cumulative usage data are service administration data, not browsing logs. The no-logs policy does not mean that destination websites or payment providers will not process data under their own policies.

Usage Analytics and Site Storage

Visit analytics on the marketing website help us understand page views, referral sources, and button usage so we can improve content and workflows. They are not used to record browsing activity on subscription routes. Analytics should remain within the scope of website usage analysis and must not include support ticket contents, passwords, or subscription credentials.

Cookies and local storage are used to maintain necessary state, save language preferences, and remember dismissed notices. The user panel stores login credentials in local storage so that subsequent requests can be authenticated. After logging out, avoid leaving an account session on a shared device.

You can clear site cookies and local storage in your browser settings. You may need to log in again and reset your preferences afterward; blocking necessary storage may affect panel functionality. Clearing browser data does not automatically delete your account or orders from the server.

Third-Party Payments and Data Sharing

Payment methods are Alipay / WeChat Pay / USDT. Payment confirmation is handled by the relevant third-party provider or transaction network. VPNSteam receives the payment result and transaction reference needed to verify an order and does not ask you to provide your payment account password.

Third parties handle transaction information under their own rules, and on-chain transaction information may be publicly accessible. The service shares relevant data only as necessary to deliver the service, resolve disputes, or meet applicable legal obligations. It does not sell account information. Necessary data sharing does not change the service's policy of not recording browsing activity.

Data Retention and Deletion Requests

Account information is retained while the account remains active and for as long as needed to provide the service. Order, refund, and dispute records are retained as required for settlement, reconciliation, and applicable legal obligations. Support ticket information is retained for as long as needed to resolve the issue and handle related disputes. Once the purpose for processing has been fulfilled, data should be deleted or processed so it can no longer be linked to an individual. Different data types are not subject to a single retention period.

To request access to, correction of, or deletion of account data, log in to the user panel and describe your request through the support ticket portal. Account ownership must be verified before processing. If data must be retained by law or due to an unresolved dispute, we will explain the reason and scope of retention. Deleting your account may make your subscription and history inaccessible.

Policy Updates and Privacy Questions

Updates to this policy will be published on this page, and the last-updated month at the top will be changed. Significant changes to data uses or processing scope will be explained through an on-site announcement or a notice in the user panel, including details of the changes and how they apply.

If you have questions about data processing, retention reasons, or the outcome of a deletion request, submit a privacy inquiry through a user panel support ticket. Provide only the information needed to identify your account and explain the issue. Contact methods not listed on this page are not designated channels for requests under this policy.