Privacy Policy
Last updated: May 2026
This policy applies to the VPNFish marketing website and user panel. It explains what data is processed to provide subscription services, why it is processed, and what requests users may make. When you use a third-party payment page or other external service, that service’s own privacy rules also apply to its data processing.
Account Data and Purposes
No email address is required to create a VPNFish account; a username and password are sufficient. Email is not a required registration detail. Account credentials are used to verify identity, maintain account access, and protect subscription benefits. Do not share your password in support tickets or screenshots.
To provide the service, VPNFish processes account identifiers, plan status, data usage, and order records. Order details include the selected plan, amount, payment status, and transaction reference information. They are used to activate benefits, verify payments, handle refunds, and resolve disputes. If you submit a support ticket, your description and any screenshots you choose to attach are used to investigate the issue. Please hide subscription links and other personal information first.
Scope of the No-Logs Policy
VPNFish follows a no-logs policy: it does not record which websites users access through international routes, or retain browsing history, accessed content, or DNS query history. It does not keep connection logs that link a user’s identity to specific browsing activity.
Temporary session state needed to operate a connection is used only for that communication and is not retained as a long-term activity record. Plan usage measurements and account status support allowance calculations and service delivery; they do not include specific websites visited or communication content. Website analytics are kept separate from user communications over international routes and cannot be used to reconstruct browsing activity.
Website Analytics and Browser Storage
Website analytics help us understand page visits, referral sources, and feature usage so we can improve content and workflows. They are not used to build cross-site browsing profiles, and do not include reading communication content carried over international routes.
Cookies and local storage are used to maintain necessary sessions, save login credentials or language preferences, and reduce repetitive steps. Login credentials stored in your browser are sensitive; do not export or share them. You can manage cookies, clear site data, or restrict storage in your browser settings. Clearing data may require you to log in again and may reset some preferences. Clearing data in your browser does not automatically delete account and order records on the server.
Third-Party Payments and Data Disclosure
This service supports Alipay / WeChat Pay / USDT. Payments are handled by the relevant third-party payment services. VPNFish verifies orders using transaction reference information and payment results; it does not ask users to provide payment account passwords. For information on data processed by a third party to complete a transaction, how it is stored, and how to exercise your rights, please consult that provider’s rules.
VPNFish does not sell personal data. Data is disclosed only when necessary to provide the service or to respond to lawful requests; processing is limited to what is needed for the applicable purpose. A third party’s role in processing payments does not mean VPNFish can control its independent data processing.
Retention and Deletion Requests
Account data is retained for as long as needed to maintain accounts and provide the service. Order, refund, and dispute records are kept for as long as needed to complete transactions, maintain accounts, and meet applicable legal requirements; no single fixed deletion period is promised. Usage analytics are retained only as long as needed for analysis, then deleted or aggregated so they can no longer be linked to individuals.
Users can sign in to the panel and use the support ticket page to request access to, correction of, or deletion of account data, and specify the scope of the request. We may need to verify account ownership before processing it. Deletion may affect login access and subscription delivery. If records must be retained by law or remain subject to a dispute and cannot be deleted at the same time, we will explain why and what data is affected.
Policy Updates and Privacy Requests
Updates to this policy will be posted on this page, and the last-updated month at the top will be changed. Important changes to processing purposes, data scope, or user rights will be noted in an appropriate place on the site. Where separate consent is required by law, we will follow the applicable requirements.
If you have questions about this policy or data processing, submit a support ticket through the user panel. Include only the information needed to verify your request and address the issue. Do not attach passwords, full subscription addresses, or unrelated payment information. See the Terms of Service and Refund Policy for service rules and refund arrangements.