Privacy policy
Draft · October 28, 2026
Pre-launch draft. Operator details and jurisdiction-specific terms are being finalized. These pages do not certify legal compliance.
Who handles your data
Vorn VPN is the service brand. The operator and contact details are listed on the Contact & legal information page. Those details must be completed before commercial launch.
Account and service data
The service processes your email address, a password hash, verification and recovery records, registered installation identifiers, device names and platform details, sessions, VPN configuration records, subscription dates, invoices and security or administrative events. These records support sign-in, access control, device limits, billing and service security.
Payments
Stripe processes payment details on its hosted checkout. The application uses payment and subscription identifiers, amounts, currencies and payment status to manage access. Do not send card numbers or passwords to support. Stripe processes information under its own privacy policy at stripe.com/privacy.
Optional IP lookup
When you select Check with ipapi.co, your browser contacts ipapi.co directly. That provider receives your public IP address and returns approximate location and network information. The lookup does not determine whether your VPN is active. The displayed lookup result is held in the current page state.
Cookies and browser storage
Authentication and security cookies support sign-in and request protection. An installation cookie can persist for up to 400 days. A theme cookie can persist for one year. Session storage keeps non-secret checkout operation identifiers to support retries. See the Cookies & storage page for more information.
Retention and disclosure
Account, billing and security records are retained in the service database. A final retention schedule, hosting locations, processor list and deletion process have not yet been approved for commercial launch. Data may need to be retained to meet applicable legal obligations or resolve disputes. This draft makes no audited no-logs or complete anonymity claim.
Your requests
Depending on applicable law, you may have rights to access, correct, delete, restrict or transfer personal data, object to processing and complain to a data protection authority. Use the operator contact shown on the Contact page once configured. Identity may need to be verified before a request is fulfilled.