1. Who we are
This Privacy Policy explains how HultraVPN (“we”, “us”, “our”) processes personal data when you use our VPN applications and related services.
For the purposes of the EU General Data Protection Regulation (“GDPR”), we act as the data controller for the processing activities described in this Privacy Policy.
2. Our privacy principles
HultraVPN is built around these core privacy principles:
- No logging of your VPN traffic content or browsing history.
- No logging of DNS queries, destination IPs, or websites visited.
- We only process the minimum data required to authenticate your account and to provide and maintain your subscription.
- No sale of personal data. No advertising trackers.
3. Data we collect and why
3.1 Account and authentication data
We process limited information to create and manage your account:
- Email address (for account creation, login and support).
- Hashed authentication credentials or tokens (to verify you when you sign in).
- Subscription status and product identifiers (e.g. active, expired, renewal date).
Legal basis (GDPR): Article 6(1)(b) – processing is necessary for the performance of a contract (providing the VPN service you requested).
3.2 Subscription & payment information
If you subscribe through the Apple App Store, Google Play Store or other payment providers, the payment is processed directly by those third parties. We do not receive or store your full payment card details.
We may receive limited information such as:
- Transaction or order ID.
- Subscription product type and renewal status.
- Approximate purchase date.
Legal basis (GDPR): Article 6(1)(b) – performance of a contract; Article 6(1)(c) – compliance with legal obligations (e.g. accounting rules) where applicable.
3.3 Technical data required to provide the VPN
When you connect to our VPN, our systems must temporarily process some technical data to establish and maintain the connection, such as:
- IP address used to connect to the VPN server.
- Connection timestamps (start and end) for session handling only.
- Basic device and protocol information (e.g. OS type, VPN protocol).
We do not log the content of your traffic, the websites you visit, DNS queries, or applications you use while connected to HultraVPN.
Legal basis (GDPR): Article 6(1)(b) – performance of a contract (we need this information to technically provide the VPN connection); Article 6(1)(f) – legitimate interest in securing our infrastructure and preventing abuse.
4. No-logs policy
HultraVPN follows a strict no-logs policy. Specifically, we do not store:
- Traffic content or payload data.
- DNS queries made while connected to the VPN.
- Websites or online services you access.
- Destination IP addresses and ports.
- Application usage or browsing history.
Any technical connection data that is necessary for the VPN session is either kept only in memory or retained for a strictly limited period and then deleted or irreversibly anonymised.
7. International data transfers
Our servers and service providers may be located in different countries. If your personal data is transferred outside the European Economic Area (EEA), we take appropriate safeguards to protect it, such as:
- Using data centers with robust security and compliance.
- Implementing standard contractual clauses approved by the European Commission, where required.
8. Data retention
We keep your personal data only for as long as necessary to:
- Provide and maintain your HultraVPN account.
- Manage your subscription and payment records.
- Comply with legal obligations (e.g. tax or accounting laws), where applicable.
When your account is closed and we no longer need your data for the purposes above, we will delete it or irreversibly anonymise it.
9. Your rights under GDPR
Depending on your location, you may have the following rights under GDPR in relation to your personal data:
- Right of access – to obtain a copy of your personal data.
- Right to rectification – to correct inaccurate or incomplete data.
- Right to erasure – to request deletion of your data, where legally possible.
- Right to restriction of processing – to limit how we use your data in certain cases.
- Right to data portability – to receive your data in a structured, commonly used format.
- Right to object – to object to certain processing based on our legitimate interests.
You can exercise these rights by contacting us using the details provided in the “Contact us” section below. We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
10. Security
We implement technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse or alteration. However, no internet-based service can be guaranteed to be 100% secure, and you use HultraVPN at your own risk.
11. Children’s privacy
HultraVPN is not directed at children, and we do not knowingly collect personal data from anyone under the age required to use such services in their jurisdiction. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you through the app or by email.
13. Contact us
If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at:
HultraVPN
This template is provided for informational purposes only and does not constitute legal advice. For full GDPR compliance, you should have this text reviewed by a qualified legal professional who is familiar with your specific service and data flows.