thePrivacy Policy
This page lists what TheVPN stores about you, what it does not, who else is involved, and how to remove your data. It describes how the service actually works today.
What we store
| What | Why |
|---|---|
| Your email address | To sign you in and to send password-reset codes. |
| Your password, as a one-way scrypt hash | To check your password when you sign in. We cannot read the password itself. |
| Your plan, any custom data cap, and whether the account is suspended | To apply the right limits. |
| For each device: its WireGuard public key, a generic name ("iPhone" or "Android phone"), its platform, the private tunnel address we assigned it, and which block lists it has on | To let the device connect and to apply your block-list choices. |
| How much data each device and account has transferred, and when each device last connected | To enforce the free plan's monthly allowance and show you what is left. |
| An activity log of account events: sign-up, a device being added, password-reset requests and administrative changes. It includes your email address and holds the most recent 500 events. | To operate and troubleshoot the service. |
What we do not store
- The websites, apps or services you use through the VPN.
- Your DNS lookups. The block-list filter answers each lookup and keeps no record of it.
- The contents of your traffic.
- Logs of the internet addresses you connect from. While a device is registered, the VPN software on the server holds the address it last connected from in memory so it can send replies; this is not written to disk. Failed sign-in attempts are counted per address in memory for a few minutes to slow down password guessing.
- Your device's private key. It is created on your phone and never sent to us.
Other companies involved
- Hostinger hosts the VPN server and account database, in the United States.
- Cloudflare provides DNS for thevpn.me and hosts this website. It may process visitor addresses to deliver the site.
- Resend delivers password-reset emails, so it receives your email address and the message when you ask for a reset.
We do not sell your data or share it for advertising. The app contains no advertising or analytics software.
The traffic itself
When the VPN is on, your traffic leaves our server towards its destination. The sites you visit see our server's address in place of yours. They can still identify you in other ways, for example if you sign in to them.
How long we keep it
- Account and device records are kept until you delete your account or remove the device.
- Monthly data totals reset on the first day of each month.
- Password-reset codes expire after 15 minutes.
Deleting your data
In the app, go to Preferences › Account › Delete Account. Your account, devices and sign-in sessions are removed from our servers immediately. Entries about you already in the activity log remain until they are pushed out by newer events.
Changes
If what we store changes, this page will be updated and the date at the top will change.