CreateYourVPN

Last updated: July 9, 2026

Privacy Policy

This Privacy Policy explains how the operator of the CreateYourVPN platform ("CreateYourVPN", "CYV", the "Operator", "we", "us") handles information in connection with the CreateYourVPN website, partner dashboard and platform (together, the "Service"). By using the Service you acknowledge the practices described here.

CreateYourVPN is a software platform that lets its customers ("Partners") deploy and manage VPN infrastructure on servers the Partner owns or rents ("Partner Servers"). We are not a consumer VPN provider and we do not operate the Partner Servers. This distinction shapes everything below.

1. Our role and what this means for your data

The Service is management software. Partners connect their own servers, and our software helps them configure VPN nodes, users and subscriptions on those servers. End-user VPN traffic flows only through the Partner’s servers and never through the Operator’s infrastructure.

Because we sit outside the data path, we have neither the technical means nor any commercial reason to see, collect or monetise the browsing activity of people who use a Partner’s VPN. Where we act only on a Partner’s instructions in respect of that Partner’s end users, the Partner is the data controller and we are a processor.

2. No-logs commitment for VPN traffic

This is the core promise of this policy. The Operator does not collect, store, monitor, analyse, sell, rent or otherwise disclose the internet activity of end users of Partners’ VPNs. In particular, we do not maintain logs of:

  • websites, apps or services an end user visits or connects to;
  • the content of any traffic passing through a VPN connection;
  • destination IP addresses or domains of end-user connections;
  • DNS queries made by end users;
  • per-user browsing history or activity timelines.

3. What we do process at the platform level

To keep the platform secure and working, we process a limited set of technical and operational data that is unrelated to what end users browse:

  • short-lived technical request logs for the platform API and subscription endpoints (such as an IP address and user-agent), kept briefly for security, abuse prevention and troubleshooting, then rotated out;
  • aggregated, per-server operational metrics (for example the number of online connections and total throughput) that contain no information about which sites or services are being accessed.

4. Information about Partners

When you register and use the Service as a Partner, we process:

  • your account email address and the one-time login codes we send to it (the Service uses passwordless sign-in, so we do not store account passwords);
  • a Telegram username, if you provide one, used to attribute your top-up payments;
  • balance, tariff and transaction records for your platform account;
  • metadata about the servers you add — including their network addresses and the access credentials you supply for deployment and maintenance, which we use solely to provision and operate the platform software on those servers on your behalf;
  • support requests you send us and their contents;
  • the technical request logs described above.

5. Information about End Users (processed for Partners)

For a Partner’s storefront and subscriptions, we process a minimal set of data about that Partner’s customers ("End Users") strictly on the Partner’s behalf: typically an email address used to sign in, and a subscription token and status. In respect of this data the Partner is the controller and we are a processor acting on the Partner’s instructions.

If you are an End User of a service built on CreateYourVPN, your relationship is with the Partner that operates that service. Please refer to that Partner’s own privacy notice and terms. Any payment details of End Users are handled by the Partner’s payment providers, not by the Operator.

6. Payments

Payments on the platform are processed by third-party payment providers. Card numbers and similar payment credentials are entered with the provider and do not reach the Operator. We receive only confirmation data such as the amount and a transaction identifier, which we use to credit the correct account.

7. Cookies and analytics

The dashboard uses only the cookies necessary to keep you signed in and to operate the Service. On our public website we use aggregated analytics (Google Analytics) to understand traffic in the aggregate. We do not use advertising trackers and we do not sell personal data. You can control cookies through your browser settings.

8. Data retention

We keep account data for as long as your account is active. After an account is closed we delete or anonymise the associated data within a reasonable period, except where we must retain certain records (such as billing and transaction records) to comply with legal, tax or accounting obligations. Technical request logs are retained only for the short periods described above.

9. Security

We use appropriate technical and organisational measures to protect the data we handle, including encryption in transit (TLS), access controls and careful handling of server access credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. How we share information

We never sell or rent your personal data. We disclose information only in these limited cases:

  • to service providers who help us run the platform (such as hosting, email delivery and payment processing), under appropriate confidentiality obligations;
  • where required by valid legal process — and here it bears repeating that we do not hold logs of end users’ VPN browsing activity, so there is no such data for us to produce;
  • in connection with a merger, acquisition or other business transfer, subject to this policy.

11. International transfers

The Service is operated using infrastructure and service providers that may be located in different countries. Where data is transferred across borders, we take steps to ensure it remains protected in line with this policy.

12. Your rights

Depending on your location, you may have rights to access, correct, delete, export or object to the processing of your personal data. You can exercise these rights, or ask us any privacy question, through the support form on our website and in the dashboard. We will respond within a reasonable time and in any event within the period required by applicable law (generally 30 days).

13. Children

The Service is a business tool intended for use by adults (18+) and is not directed to children. We do not knowingly collect personal data from children.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "last updated" date, and where changes are material we will provide notice through the dashboard. Your continued use of the Service after an update means you accept the revised policy.

15. Language

This document may be provided in several languages for convenience. The English version is the governing text; in the event of any conflict or discrepancy, the English version prevails.

16. Contact

For any question about this policy or your data, contact the Operator through the support form available on our website and inside the partner dashboard.