VPNMK provides a cross-border network acceleration subscription service: users pick an international route in the client to reach international websites and overseas services. Running the service requires handling a small amount of account, order, and access-related data, but it does not require knowing what a user accessed after connecting. This policy covers the two areas separately.
What this policy covers
This policy applies to the Simplified Chinese site at vpnmk.com, the user panel, and the Windows / macOS / iOS / Android / Linux clients. Creating an account or continuing to use the service means you have read and agree to this policy; if you do not agree with these practices, please do not create an account, and an existing account can be deleted using the method at the end of this page. The privacy practices of third-party payment channels are outside the scope of this policy; see the “Payments and third-party processing” section.
What data is collected and why
Creating an account requires only a username and password, with no email address, so the service holds very little account data. It falls into three categories by purpose:
- Account data: username, password hash, registration time, subscription status. The username is used for sign-in and ticket identification; the password is stored as a hashed digest, and the service cannot read the plaintext.
- Order data: order number, the plan or data pack purchased, amount, payment method (Alipay / WeChat / USDT), and order and activation times. It is used to activate subscriptions, meter traffic, calculate prorated credit on upgrades, and handle the 14-day no-questions-asked refund.
- Access statistics: aggregated visit data for site pages, such as page URL, referrer, device type, and rough region. It is used to check whether pages work and which topics need more coverage. The statistics are not linked to account identity and are not used for ad targeting.
This data is used only to provide and maintain the subscription service. It is not sold to third parties and is not shared with advertisers.
The no-logs stance and connection records
The service does not log which websites a user visits, does not store connection content, and does not keep DNS query details. On the route side, only the minimum information needed to keep the service running is processed: whether a connection was established and when it ended, the traffic used by that session (for plan metering), and the error codes and route IDs needed for troubleshooting.
This information is aggregated per session, is not linked to specific destinations, and is not used to analyze user behavior. Session-level data is kept only for the short period needed for billing checks and troubleshooting, then cleared automatically; after that period only traffic totals with no personal identifiers are retained for capacity planning.
Cookies and local storage
The site uses only a small number of cookies and browser local storage, limited to three purposes:
- Keeping you signed in: a session identifier is written after you sign in to the user panel and expires when you sign out or the session times out;
- Remembering preferences: for example, the interface language you last selected;
- Access statistics: anonymous counts used to understand page traffic.
The site does not use third-party advertising cookies and does not use local storage for cross-site tracking. You can clear this data at any time in your browser settings; after clearing it you will need to sign in again, and your purchased plan and remaining traffic are unaffected.
Payments and third-party processing
Payments are completed through third-party channels; the service supports Alipay, WeChat, and USDT. Payment happens on the channel's own page, and the service neither touches nor stores card numbers, payment passwords, or wallet private keys. The channel processes payment information under its own privacy policy and, once the transaction is complete, returns the order number and payment result, which are used to activate the subscription and for after-sales checks.
Apart from payment channels and essential technical service providers, account and order data is not shared with other third parties. Technical service providers access data only within the scope needed for operations and are bound by confidentiality agreements.
Data retention, deletion, and policy updates
Retention: account data is kept for as long as the account exists; order data is kept for the period needed for refunds and reconciliation; access statistics are stored in aggregate form with no personal identifiers; session-level connection data is kept short-term and cleared automatically when it expires.
Deletion: users can submit a ticket in the user panel at any time to request an export or deletion of account data. Once a request is received, account ownership is verified first, then account details and personal information in orders are deleted; bookkeeping records that must be kept by law are deleted after the retention period ends.
Security: passwords are stored in an irreversible form, internal access follows least-privilege authorization, and traffic between the client and the routes uses military-grade encryption.
Updates: this policy is updated as features change or regulations require, and the “Last updated” date at the top of this page is changed at the same time; material changes to how data is used are announced on the site. Continuing to use the service after a change takes effect means you accept the updated policy.
If you have a privacy question or request, submit a ticket in the user panel; requests are handled in the order they are received.