Privacy Policy

Scope and Processing Principles

This policy applies to the icuVPN website, user panel, clients and related subscription services. Data is processed to provide the service, maintain accounts, complete orders, keep routes operating and respond to user requests, and is limited to what is necessary for these purposes.

The service does not sell personal data in ways unrelated to these purposes. When infrastructure, payment or analytics providers need to assist with processing, they receive only the information required for their specific work and are expected to handle it under applicable rules.

Data Processed and Its Uses

No email address is required for registration; an account can be created with a username and password. The system processes the username, account authentication credentials and necessary account status for login verification, subscription delivery, unusual-access checks and account recovery. When a user submits a support ticket, its text and attachments are used to understand the issue and provide assistance.

Order records may include the selected plan, amount due, payment method, payment status, transaction identifier and refund status. This information is used to confirm orders, activate services, reconcile payments and handle disputes. Website analytics may process page views, referring pages, browser type, device category and interaction events to check whether pages work properly, improve information structure and analyze service entry points. Analytics data is aggregated or de-identified whenever possible.

No-Logs Position and Connection Data

icuVPN does not record which websites users access, retain web content, communication content, domain requests or historical records that could reconstruct specific browsing activity, and does not build browsing profiles.

To establish connections, measure traffic, diagnose faults and protect security, the system may temporarily process account status, route selection, connection results, error types and necessary network diagnostic information during operation. This information is not retained as long-term browsing activity logs. Temporary diagnostic data is deleted or de-identified after the related fault, security incident or service request is resolved; records that must be retained by law are handled as required.

Cookies and Local Storage

The website and user panel may use cookies or browser local storage to save login status, language preferences, interface settings and necessary session information. These data maintain login sessions, restore user choices and prevent repeated setup, and are not used to record specific browsing content.

Users can clear cookies and local storage through browser settings. After clearing them, login status and saved preferences may no longer work, requiring a new login or renewed selection of relevant settings. The client may also save subscription configuration and connection preferences locally on the device; deleting client data or uninstalling the client will affect these local settings.

Payment Processing and Data Sharing

The service supports Alipay, WeChat Pay and USDT. Payment confirmation is handled by the relevant payment provider or transaction network, whose privacy rules are set by that provider. icuVPN does not directly store complete authentication credentials for third-party payment accounts, but receives the transaction identifier, amount and payment status needed to complete orders, reconcile payments and process refunds.

Except when necessary to complete payments, provide infrastructure, operate analytics, respond to user requests or fulfill applicable obligations, the service does not disclose account or order data to unrelated parties. Each provider processes only the information within its assigned responsibilities.

Retention, Deletion and Policy Updates

Account information is retained while the account remains in use. Order and transaction records are retained for reconciliation, dispute handling and applicable requirements. Ticket content is retained until the issue is resolved and any necessary follow-up review is complete. When data no longer serves its stated purpose and there is no need to retain it, it is deleted or de-identified.

Users can request access, correction or deletion of account-related data through user panel tickets. Deletion requests are handled after verifying identity and account ownership. Data related to unfinished orders, disputes, security incidents or applicable retention requirements may be subject to restricted processing until those matters end rather than deleted immediately.

This policy may be updated when service processes, technical implementation or applicable rules change. The revised text will be published on this page, and the last-updated date at the top will be changed. If a change materially affects the scope of data processing or user rights, relevant information will be provided through the website or user panel.