Privacy Policy

CueVPN is built on a single principle: your data is yours. We operate a strict no-logs VPN service, which means we do not collect, store, or share any information about what you do online your browsing history, traffic data, DNS queries, IP addresses, session timestamps, or bandwidth usage.

This Privacy Policy explains what limited information we do collect to operate the service, how we use it, and your rights over it. Our practices have been independently audited by a third-party security firm and are updated annually.

We collect only the minimum information necessary to provide and improve CueVPN:

• Account information: Your email address and hashed password when you register. We do not require your real name.
• Payment data: Processed securely by our payment providers (Stripe). We store only the last 4 digits of your card and expiry date for support purposes. Full card details are never stored on our servers.
• Diagnostic data (optional): Anonymous crash reports and aggregated performance metrics if you opt in. No personally identifiable information is included.
• Support communications: Messages you send to our support team, retained only for the duration needed to resolve your issue.

Our no-logs policy is absolute. We never collect or store:

• ✕VPN session timestamps or connection logs
• ✕Your real IP address or the VPN IP assigned to you
• ✕DNS queries you make while connected
• ✕Traffic data, content, or metadata of your communications
• ✕Bandwidth consumed per session
• ✕Which websites, apps, or services you access

Because we don't store this data, we cannot hand it over to any government, law enforcement agency, or third party even if legally compelled to do so.

The limited information we collect is used exclusively to:

• Create and manage your account
• Process payments and prevent fraud
• Send transactional emails (receipts, password resets, service announcements)
• Respond to support requests
• Improve service reliability through anonymized diagnostics (opt-in only)

We do not sell, rent, or trade your information to third parties for marketing purposes ever.

Account data is retained for the lifetime of your account plus 30 days after deletion, to allow for recovery requests. Payment records are retained for 7 years as required by financial regulations. Support tickets are deleted 12 months after closure. If you delete your account, all personal data is permanently erased within 30 days.

We use a small number of trusted third-party providers to operate CueVPN:

• Stripe: Payment processing subject to their Privacy Policy
• Cloudflare: DDoS protection and CDN no VPN traffic passes through
• Postmark: Transactional email delivery

None of these providers have access to your VPN traffic or activity.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access the data we hold about you
• Right to correct inaccurate data
• Right to deletion (right to be forgotten)
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority (EU/UK users)

To exercise any of these rights, contact us at privacy@cuevpn.com. We will respond within 30 days.

VPN traffic is encrypted with WireGuard's ChaCha20-Poly1305 cipher and Curve25519 key exchange. Account data and operational records use industry-standard encryption at rest and TLS for data in transit. We operate a responsible disclosure program if you discover a vulnerability, please report it to security@cuevpn.com.

CueVPN is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

We will notify you of material changes to this policy via email and an in-app notice at least 30 days before the changes take effect. Continued use of CueVPN after the effective date constitutes acceptance of the updated policy. The most current version is always available at cuevpn.com/privacy.

If you have questions or concerns about this Privacy Policy, contact our Data Protection Officer at privacy@cuevpn.com or write to us at CueVPN Ltd., 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.