Privacy Policy

Last updated: October 2026

This policy explains how Y5VPN handles data when providing subscription services, managing accounts, and operating this website. Data is processed only as needed to deliver the service, verify transactions, protect account security, and improve the website. The user panel and third-party payment pages handle data differently, as explained below.

Account and Order Data

Y5VPN does not require an email address. An account can be created with a username and password. You do not need to provide an email address during account creation, and an email address is not a prerequisite for activating the service. Account data is used for authentication, linking subscription benefits, and managing account settings. Passwords should be stored in an irreversible verification form and are not used for other purposes.

Order records include the selected plan, order amount, payment method, transaction status, and necessary transaction identifiers. They are used to confirm payment, deliver subscriptions, verify data usage, and process refunds. Support tickets submitted by users help us address specific issues. Please do not include passwords, complete payment credentials, or subscription links in a ticket.

No-Logs Policy and Operational Data

Y5VPN does not record which websites users access through the service, store browsing content, visited domains, or DNS query history, or maintain per-connection logs or activity profiles linked to accounts. This no-logs policy applies to activity on the subscription network; it does not mean that account and order data needed to deliver the service is deleted.

Account data usage and subscription status are used to calculate usage and verify subscription benefits; they do not include access destinations. Temporary operational information needed to troubleshoot a fault is used only for that diagnosis and is deleted or de-identified once the issue is resolved. It is not retained as long-term connection history. When reporting an issue, please describe the error message and client environment where possible.

Access Analytics and Local Storage

Visits to the marketing website are analyzed separately from activity on the subscription network. Analytics may include marketing page paths, referral categories, browser and device categories, and page interaction events. This information helps us understand how people use the site and its entry points; it is not used to create browsing records for the subscription network.

Cookies and local storage help maintain login sessions, remember language preferences, and save essential interface settings. Access analytics may use cookies to distinguish visits. You can restrict cookies or clear site data in your browser settings, but doing so may require you to log in again or reselect your preferences. Sign out after using a shared device. Clearing local data does not delete your server-side account.

Third-Party Payments and Data Disclosure

This service supports Alipay / WeChat Pay / USDT. Payments are handled by third-party payment services or the relevant transaction networks, and the information they collect is subject to their own policies. Y5VPN receives the payment result and transaction identifiers needed to verify orders. You are not required to provide your payment account password to this service.

Y5VPN does not control information that is publicly available on transaction networks. Account data is not sold or rented. Necessary data is disclosed only to the extent required to complete transactions, respond to user requests, or meet legal obligations, and access to that data is limited.

Data Retention and Deletion Requests

Account data is retained while the service is being provided. Order and refund records are retained as needed to verify transactions, handle disputes, and meet applicable legal requirements. Detailed access analytics are kept only for as long as needed for analysis, then deleted or aggregated. Each data category is handled according to its purpose; there is no single indefinite retention period.

You can request access to, correction of, or deletion of your data through a user panel ticket. We will first verify account ownership, then explain what can be handled. Records that must be retained by law or are still involved in a transaction dispute cannot be deleted with the account. Residual data in backups is removed as backups are rotated and is not used for routine operations.

Policy Updates and Contact

Updates to this policy will be published on this page, and the month shown at the top will be updated. Significant changes to the purposes or scope of data processing will be explained through a website announcement or a notice in the user panel. If separate consent is required, a prompt will appear in the relevant feature.

For privacy questions or data requests, use the ticket entry listed on the Contact Us page. Subscription rules and refund terms are available in the Terms of Service; this policy does not replace transaction rules.