Privacy Policy
Last updated: May 18, 2026
This Privacy Policy describes how WorkingVPN (“WorkingVPN”, “we”, “us”) collects, uses, and protects information when you use our VPN services, our website at workingvpn.com, our mobile and desktop apps, and our browser extensions (the “Service”). By using the Service, you consent to the practices below.
Summary
- We do not log your VPN traffic, browsing history, or DNS queries.
- We do not sell or rent user data.
- We collect the minimum needed to run the service: email, payment, basic security signals.
- The VPN runs only when you turn it on, and you can stop it at any time.
- You can delete your account and your data from your My Account page.
VPN Traffic: No Activity Logging
We do not retain records of what you do through the VPN. We do not write to disk, aggregate, or share the websites you visit, your DNS queries, the contents of your traffic, or the source or destination IPs of your connections.
Our servers necessarily process connection information in real time in order to forward your traffic. That information lives only for the moment it is needed to route a packet and is not retained.
We keep limited account-level security information, separate from any VPN traffic: recent sign-in events and the devices you have authenticated from, so we can protect against unauthorized access and let you revoke device sessions.
What We Collect
- Account: email address and a hashed password.
- Billing: subscription plan and billing identifiers. Card details are handled by our payment processors and are not stored on our servers.
- Website request data: standard server logs from workingvpn.com (IP, user agent, referrer, requested page), used for security and operational purposes, kept short-term.
- Session and device records: sign-in time and a short summary of the device used, so you can see active sessions in your account.
- App diagnostics: anonymized crash data through Sentry. Crash reports do not include VPN traffic, browsing content, or page URLs you visit.
- Support communications: emails you send us and our replies.
We do not collect your phone number, precise location, contacts, photos, microphone, camera, biometrics, or advertising identifiers. We do not use third-party advertising networks or retargeting pixels.
Cookies and Analytics
On workingvpn.com we use a small number of cookies for authentication, session management, and aggregate analytics via Google Analytics 4. We do not use advertising cookies. Where applicable law requires consent for analytics cookies, we ask for it on your first visit.
How We Share Information and Subprocessors
We do not sell or rent your information. We share limited data with the service providers that help us run the Service, under agreements requiring them to protect your information and use it only on our instructions:
| Provider | Purpose |
|---|---|
| Stripe, Inc. | Web checkout and recurring card billing |
| Apple Inc. | In-app purchases and subscriptions on iOS and macOS |
| Google LLC (Play Billing) | In-app purchases and subscriptions on Android |
| Google LLC (Analytics 4) | Aggregate website analytics |
| Functional Software, Inc. (Sentry) | Application crash reporting |
| Cloudflare, Inc. | CDN, DNS, and storage of downloadable installers |
| Our hosting and VPN-server providers | Running our infrastructure in the country shown for each server |
We may also disclose information when we believe in good faith it is required by valid legal process (such as a subpoena or court order), to protect against fraud or threats to safety, or with your consent. We do not disclose information we do not retain.
Data Retention
- VPN traffic: not retained.
- Account profile: while your account is active; deleted within 30 days of an account-deletion request.
- Sessions and device records: 90 days from last activity.
- Support emails: 24 months after the conversation closes.
- Billing records: 7 years, to meet tax-law requirements.
- Encrypted backups: rotated within 30 days.
Your Rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can exercise most of these rights from your account page, and you can email [email protected] for anything else.
You can delete your account at any time from the My Account page. Deletion removes your personal data from our active systems within 30 days and cancels any active subscription.
App Store and Google Play Compliance
In accordance with Apple App Store Review Guideline 5.4 and the Google Play Developer Program Policies for VPN apps:
- We do not sell user data to any third party for any purpose.
- We do not use user data for purposes unrelated to providing the VPN service.
- We do not disclose user data to third parties except as needed to operate the service (for example, a payment processor for billing) or as required by law.
- Our VPN apps establish a tunnel only when you explicitly enable it and disclose to your operating system that they are acting as a VPN.
Children
WorkingVPN is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will delete it.
Security
We protect personal information with administrative, technical, and physical safeguards, including TLS in transit, encryption at rest for our databases and backups, hashed passwords, and role-based access controls on production systems. No system is completely secure, and we cannot guarantee absolute security. If we learn of a breach that affects you, we will notify you and the appropriate regulators as required by law.
International Data Transfers
WorkingVPN is operated from Canada. Your information may be transferred to and processed in countries other than your own, including the United States, the European Union, and the country in which your selected VPN server is located. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for transfers of personal information out of the EEA and the UK.
Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. For material changes that affect you, we will give notice by email and on our website.
Contact
- Email: [email protected]
- Company: WorkingVPN
- Location: Kitchener, Ontario, Canada
If you have a privacy concern, please contact us first at [email protected] so we can try to resolve it. If you're not satisfied with our response, you also have the right to complain to a privacy regulator — in Canada, the Office of the Privacy Commissioner of Canada; in the EEA or the UK, your local Data Protection Authority.
See also our Terms of Service.
WorkingVPN is a registered business name of LoudTronix Inc., an Ontario corporation. Disclosure provided pursuant to the Ontario Business Names Act.