Back to Legal

Privacy Policy

Last updated: February 1, 2026

Summary: OrbVPN is committed to your privacy. We operate on a strict no-logs policy and collect only the minimum information necessary to provide our service. We never sell or share your personal data with third parties for marketing purposes.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address (required for account recovery and important notifications)
  • Password (stored using industry-standard bcrypt hashing)
  • Payment information (processed by our payment providers; we do not store full card numbers)

1.2 What We DO NOT Collect

OrbVPN maintains a strict no-logs policy. We do NOT collect, store, or monitor:

  • Your browsing activity or traffic data
  • DNS queries
  • IP addresses assigned to you when connected
  • Your original IP address
  • Connection timestamps
  • Session duration
  • Bandwidth usage per session

2. How We Use Your Information

We use the limited information we collect to:

  • Provide and maintain our VPN service
  • Process your payments and prevent fraud
  • Send important service notifications
  • Provide customer support when you contact us
  • Improve our service based on aggregate, anonymized usage patterns

3. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share information only in the following limited circumstances:

  • Payment processors: To process your subscription payments
  • Legal requirements: If required by law (see our Transparency Report)
  • With your consent: When you explicitly authorize us to share information

4. Data Security

We implement industry-leading security measures to protect your data:

  • AES-256 encryption for all data in transit and at rest
  • Post-quantum encryption (Kyber768) for future-proof protection
  • Regular security audits by independent third parties
  • Bug bounty program for responsible disclosure
  • RAM-only servers that cannot store data persistently

5. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and data
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing activities

6. Cookies

Our website uses minimal, essential cookies for:

  • Session management and authentication
  • Language and region preferences
  • Security (CSRF protection)

We do not use tracking cookies or third-party analytics that could compromise your privacy.

7. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

8. International Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the new policy on this page with an updated "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

  • Email: privacy@orbvpn.com
  • Address: 548 Market St, Suite 12345, San Francisco, CA 94104, USA