Legal

Privacy Policy

Last updated: 2026-10

This policy applies to the international route subscription service provided by VPNSort, the public pages on this site and the user panel. It explains what data is processed while the service is provided, the purposes of processing, retention periods, and how users can access and delete that data. Third-party sites reached through links from this site are governed by their own privacy terms and fall outside the scope of this policy.

What data we collect and what it is used for

VPNSort collects only the data needed to keep the service running, in three categories.

Account data. Signing up requires only a username and password, with no email address. Passwords are stored as an irreversible hash; the system never keeps the plaintext password and cannot recover the original from the stored value. The username identifies the account in the user panel and links subscription status and orders to it.

Order and billing data. This covers the plan or data pack tier selected, order amount, payment method (Alipay / WeChat / USDT), order time and payment status. It is used to activate subscriptions, track remaining data, calculate the price difference when upgrading mid-term, and handle refunds and reconciliation.

Visit statistics. This covers page paths, referral source, device type and approximate region. Statistics are used in aggregate to check that pages work, trace errors and improve content, and are not linked to individual accounts.

No browsing logs

The subscription service does not record which websites a user visits. VPNSort does not store browsing history or DNS query details, and does not combine connection times, destination IP addresses and account identity into a traceable usage record.

To keep routes available, the system retains only the aggregate metrics needed for operation: the order of magnitude of online devices per route, node load and connectivity status. These metrics stay at the route level and never attach to what an individual account accesses.

In handling requests, servers necessarily come into contact with the source IP address and the destination IP address; this is a precondition of any network communication. Such information is not kept long term, is not used for user profiling and is not used for advertising.

Cookies and local storage

This site loads no third-party advertising or tracking scripts; the local storage used by the pages serves functionality only:

• Language preference. Records the interface language a visitor chose, so the next visit opens directly in that language.
• Session credential. After signing in to the user panel, the browser stores a session credential locally so that refreshing the page or switching sections keeps you signed in. Signing out, changing the password or clearing browser data invalidates it immediately.
• Interface state. For example, the last option selected in the plan-period switcher or whether a list was expanded. Used only to restore the interface and contains no personal data.

You can view, clear or block local storage in your browser settings. Blocking it disables the language preference and persistent sign-in; browsing public pages is unaffected.

Payments and third-party processing

Payments are handled by third-party channels. VPNSort supports Alipay, WeChat and USDT, and the charge is made within the relevant channel. Card numbers, account balances, payment passwords and other payment credentials never pass through this site's servers and are not stored here.

This site only receives the order result returned by the channel: order number, amount, payment status and payment time, used to activate the subscription and to verify after-sales requests.

Servers, object storage and content delivery are provided by contracted infrastructure providers. They access data only to the extent necessary to deliver their services and are bound by confidentiality and data-processing terms.

Personal data is not provided to any other party except to complete payment, keep the service running, or where the law expressly requires it.

Retention periods and how to delete data

Account data is retained while the account exists. After an account is closed, the account information is deleted or anonymised within the short window needed to complete reconciliation, and is not used for any purpose afterwards.

Order and billing data is retained for the period necessary after an order is completed, for refund verification, dispute handling and financial records; where the law sets a different retention period, the legal requirement applies.

Visit statistics are kept in aggregate form; the aggregated results contain no personally identifying markers and cannot be traced back to a specific account.

How to delete: sign in to the user panel and submit a deletion request through the ticket entry, stating which account or data scope should be deleted. Once account ownership is verified, the request is processed accordingly and cannot be undone afterwards; deleting an account also ends the subscription, so please confirm before proceeding.

Policy updates and contact details

When the content of this policy or the way data is processed changes, the last-updated date at the top of this page is changed at the same time. Material changes to what is collected, why it is used or with whom it is shared are announced in advance in the site announcements or through a user panel notice; the scope of data use is never widened without informing users.

Continued use of the service is taken as acceptance of the updated policy. If you do not accept it, you may stop using the service and apply for a refund under the 30-day no-questions-asked refund terms listed on the pricing page.

If you have questions about this policy, or need to access, correct or delete personal data, submit a request through the ticket entry in the user panel, stating your account and exactly what you need. Tickets are the formal channel for data requests, and progress can be tracked in the panel. Other terms are set out in the Terms of Service.