Privacy policy
Last updated 23 October 2026
1. Summary
| What you do on the VPN | Not recorded. We keep no record of which server you use, your IP address while connected, when you connect, or the sites you visit. Section 4 |
|---|---|
| Your account | Created without an email address, name or phone number. We keep a short list of records about it. Section 3 |
| Payments | Apple, Google or Stripe handle payment. For card payments, Stripe holds your email address and we can see it in Stripe. Section 5 |
| Emails you send us | Launch-list and support emails are kept separately from any VPN account. Sections 8 and 9 |
| Sharing | We don't sell data or use it for advertising. Payment processors, app stores, and our hosting and email providers handle data only to run RetuVPN. Section 10 |
2. Who we are
RetuVPN is operated by Verolant LLC, 8 The Green, Ste B, Dover, DE 19901 (“we”, “us”). We decide how the data described here is used, which makes us the controller under the GDPR and UK GDPR.
Our representative in the European Union is {{EU_REP_NAME}}, {{EU_REP_ADDRESS}}, [email protected]. Our representative in the United Kingdom is {{UK_REP_NAME}}, {{UK_REP_ADDRESS}}, [email protected]. You can contact them instead of us about anything in this policy.
3. What we keep about your account
This is everything our account service keeps about a RetuVPN account.
| Record | What it holds | Why | Kept for |
|---|---|---|---|
| Account | A random account ID, a hash of your account code, the date the account was created, and the IP address it was created from with the last part removed (for example 203.0.113.x) | To recognise your account and limit mass sign-ups from one network | Until the account is deleted |
| Devices | Each device's public key, a name you choose for it, and the date (not the time) it last renewed its pass | To enforce your plan's device limit, let you remove a lost device, and delete unused accounts | Until you remove the device or the account is deleted |
| Passes | That a pass was issued and when it expires. Not whether, where or when it was used | To revoke passes and stop duplicates | 7 days after the pass expires |
| Daily usage | One number per account per day: total bytes. No server, address or time of day | To enforce the free plan's 500 MB allowance | 60 days |
| Subscription | Your plan, its renewal date, where you bought it (Stripe, App Store or Google Play) and that payment system's subscription ID | To know what you've paid for, handle renewals and move a subscription when you restore it | While active, then as long as tax and accounting law requires, up to 7 years |
4. What we don't keep
We don't keep any of the following, for any user, in any system or backup:
- which server you used, when you connected, or for how long;
- the IP address you connect from, apart from the shortened sign-up address in section 3;
- the sites, apps or services you reach, or your DNS lookups;
- the content of your traffic;
- usage per server or per location.
Exit servers run with logging for VPN connections turned off. The state they need to carry your traffic is held in memory while you're connected and discarded when you disconnect. Backups of our account service contain only the records in section 3.
Exit servers hold no account information. The data centres that host them can see traffic entering and leaving their networks, as any network operator can, but nothing that links it to an account. The records in section 3 are stored only on our account service in Frankfurt.
5. Payments
Card payments through Stripe
The Windows app, and the Android app installed from our website, take payment through Stripe. Stripe collects your card details, billing country and postal code, and the email address it sends receipts to. Card numbers never reach our servers.
From Stripe we receive a customer ID, which we link to your account ID, plus the card brand, the last four digits, the billing country and whether each payment succeeded. Your receipt email stays in Stripe. We don't copy it into our own database, but we can see it in Stripe when you ask us about a payment.
If you restore a card purchase, we use the email address you enter only to find your Stripe subscription and send a confirmation link to it. We don't store it.
Stripe also uses payment data to prevent fraud, as an independent controller under the Stripe privacy policy.
App Store and Google Play
When you subscribe through the App Store or Google Play, Apple or Google handles the payment. We receive a transaction ID and the subscription's status and renewal date. We don't receive your name, email address or payment details.
6. Our apps
The apps contain no advertising or analytics code and don't send crash reports. They contact our servers only to:
- create your account and register your device's public key;
- renew your pass and check your plan;
- restore a subscription when you ask;
- download the signed server list;
- check for updates, for apps installed directly from our website.
On Android, before the system asks you to allow the VPN connection, the app explains why it needs Android's VpnService and asks you to agree.
7. This website
retuvpn.com sets no cookies, runs no analytics, loads no third-party scripts and serves its fonts from our own server. Our web server logs the time, the page requested, the response code and your IP address with the last part removed. We keep those logs for 14 days to detect attacks and fix errors, and we don't connect them to any account.
8. Launch list
If you join the launch list, we keep your email address with our email provider and use it to send one email when the apps launch. We delete the list within 30 days of launch. The list isn't connected to any VPN account. You can leave it at any time by writing to [email protected] or using the link in the email.
9. Support email
When you write to us, we receive your email address and whatever you send. We use it to answer you, keep the conversation for 12 months, then delete it. Support conversations aren't connected to a VPN account unless you give us a receipt or order number to look up. Our staff will never ask for your account code.
10. Companies we work with
These companies handle data as part of running RetuVPN, only for the purposes listed. Stripe, Apple and Google also act under their own privacy policies for the data they collect from you directly. We'll tell you the names of our hosting and email providers if you ask.
| Who | What they do for RetuVPN | Data involved |
|---|---|---|
| Stripe, Inc. | Card payments for direct purchases | Payment details and the records in section 5 |
| Apple and Google | App Store and Google Play distribution and in-app purchases | Transaction IDs and subscription status |
| Account-service host | Data centre in Frankfurt, Germany, that runs our account service | The records in section 3 |
| Exit-server hosts | Data centres in the countries listed in the app | Your traffic passes through. No account records are stored there. |
| Website host | Serves retuvpn.com | The server logs in section 7 |
| Email provider | Support inbox and the launch email | Email addresses and messages |
We don't sell or rent data. We don't use or disclose it for advertising, profiling or any purpose other than providing RetuVPN and meeting our legal obligations.
11. Legal bases
Where the GDPR or UK GDPR applies, we rely on:
- contract, to create and run your account, devices, passes and subscription;
- legitimate interests, to enforce data allowances, limit mass sign-ups, keep web server logs and answer support email;
- legal obligation, to keep billing records for tax and accounting;
- consent, for the launch list, which you can withdraw at any time.
12. Your rights
Depending on where you live, you can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or to send it to you in a portable format. In the EU and UK you can also complain to your data protection authority.
If you live in California or another US state with a privacy law, you can ask what personal information we hold, ask us to delete or correct it, and appeal if we refuse. We don't sell personal information or share it for cross-context behavioural advertising, and we won't treat you differently for using these rights.
Write to [email protected]. We reply within 30 days. To appeal a decision, reply with “Appeal” in the subject line.
Because we don't know who you are, we act on a request about an account only when you show you control it: by making it in the app, by entering the account code on our deletion page, or, for a paid account, by confirming the purchase as described on that page.
13. Deleting your account
Delete your account in the app under Settings, then Account, then Delete account, or on our account deletion page, which works without the app. Without your account code, we delete an account only after confirming it's yours: through the email address on your Stripe receipt, or by your restoring an App Store or Google Play purchase in the app. A receipt or order number on its own is never enough.
We delete the account, its devices, passes and usage totals. Deletion in the app or with your code happens straight away; we complete verified email requests within 7 days. Billing records are kept as long as tax law requires.
Deleting your account cancels a card subscription through Stripe straight away. App Store and Google Play subscriptions continue until you cancel them in your store account.
If you have neither the code nor a purchase, we can't tell which account is yours. Accounts with no active subscription and no pass renewal for 12 months are deleted automatically.
14. International transfers
We are a US company. Our account service runs in Frankfurt, Germany, and exit servers run in the countries listed in the app. When personal data moves from the EEA, the UK or Switzerland to the United States, we rely on the EU-US Data Privacy Framework and its UK and Swiss extensions where the recipient is certified, and otherwise on the European Commission's standard contractual clauses with the UK addendum.
15. Requests from authorities
We answer valid legal requests with the data we actually hold. We can't say which account used an IP address, a server or a connection at a given time, because we don't keep that information. We challenge requests we believe are unlawful or too broad.
We have no way to contact you directly. Every six months after launch, we will publish on this page how many requests we received and how we responded.
16. Security
All connections to our servers are encrypted. Account codes are stored only as hashes, and private keys stay on your device. Access to production systems is limited to the people who run them. To report a vulnerability, see our security page.
17. Children
RetuVPN is for people aged 18 and over. We don't knowingly collect data about children. Because we collect no age or identity data, we enforce this through our terms.
18. Changes to this policy
If we change what we collect, we'll announce it in the apps and on this page at least 30 days before the change takes effect. The date at the top shows the last change.
19. Contact
[email protected]
Verolant LLC, 8 The Green, Ste B, Dover, DE 19901