プライバシーポリシー

The short version

KazaVPN has a no-logs policy. We keep no record of the sites you visit, the names you look up, the addresses you connect from, or how much data you move. We keep what is needed to run your account and, if you buy a plan, to bill you, and nothing more. The no-logs page lists every single item, how long it lives and how you can check it; this page says the same thing in the words a policy needs.

The controller

The company that runs KazaVPN is the controller for everything this page describes. Its registered name, address and contact details will appear here once the company has finished forming; until then, write to support@kazavpn.com for anything you would otherwise send the controller directly.

What our servers do not keep

• No browsing history, no record of the names your device looks up, and no destination addresses.
• No record of which VPN server you used at what time, and no history of connections.
• No bandwidth or traffic volume per person.
• No address of yours in any log we keep.

Our servers hold nothing about you on disk. What is needed to carry a device's traffic exists only while that device is connected, and it is gone the moment it disconnects. Switch a server off and there is nothing on it for anyone to find, because nothing about you was ever written down.

What we store about your account

• Email address and language. Your password is kept only in a scrambled form that cannot be turned back and that we cannot read.
• If you sign in with an account number instead: that number, kept only in a scrambled form that cannot be turned back and that we cannot read or send you, and your language. We hold an email address for such an account only if you add one so that you can get back in if you lose the number; it is never a way to sign in.
• Devices you add: the name you give them, what kind of device each one is, the app version it last reported, and the key its encrypted connection is built with.
• Your membership: for the one you have and each one before it, the plan, whether it is running, overdue or cancelled, whether it is a free trial, the dates it covers, whether it renews, and when it was made and last changed. One you paid for also holds which payment provider took the payment, one that renews also holds that provider's reference for it and when we last checked it with them, and one a refund or a dispute ended early holds the day it ended. One that turned out to be the later of two renewing plans paid at once also holds when we found that, and the payment provider's references for the payment we gave back and for the refund.
• Your payments: for each one, the plan, the way you paid and the coin if you paid in crypto, the amount and currency asked and the amount that arrived, where it stands, the days it gave and to which membership, which payment provider took it and its reference there, and when it was opened, when its price stops being valid, when it was paid and when it last changed, and the address of its payment page while it can still be paid, so you can come back and finish, emptied once it is paid, refused or runs out. For a payment in Telegram Stars, also the number Telegram uses for whoever paid, so our team can give it back to them. If you press pay twice within a few minutes, the payment page the first press opened is kept for those minutes under a scrambled form of your account, so that the second press opens the same page.
• Your payment provider reference, if you buy a membership that renews: which payment provider holds your record, its reference for you, which ties your account to that record, and when it was made, and the date of your last successful payment, which is what limits reminders about your plan.
• A payment dispute, if your bank disputes a payment: which payment provider it is at and that provider's references for the dispute and for the payment, the amount and currency, the reason your bank gave, where it stands, the day an answer is due, and when it was opened and last changed. If the bank decides against us, we also keep the day it did, which stops new purchases until our team lifts it.
• A refund our team started in Telegram, for a payment made with Telegram Stars: the payment, the number Telegram uses for you, who on our team asked, why and when, how many times we have tried and when we last did, and Telegram's answer if it refused. It is deleted as soon as the refund is done.
• Closing a paid plan: after you delete your account, or after a refund or a dispute ends a membership that renews, the payment provider's references for the plan and for you, which provider holds them, when we asked, how many times we have asked and the last answer, until the provider confirms the plan is closed. It holds no account and no address.
• A gift code you redeem: for every code, a scrambled form of it and never the code itself, the plan and the days it gives, who made it and when, in which batch, our team's note on it and the payment that bought it if one did; once you redeem it, which account redeemed it and when and the membership it gave; if it is cancelled instead, who cancelled it and when. Deleting your account removes the link to you, and a code that was used or cancelled is deleted 365 days after that.
• Card and wallet details never reach us: you type your card only into our payment provider's own form, and when you pay in crypto we never keep your wallet address or the transaction. Everything above about your payments is deleted with your account, except what Retention and deletion says survives it.
• A record that a message was sent to you: which kind, and when, so you are not sent the same one twice. It holds no address and no content.
• A messaging account you link, such as Telegram: the messenger's own number for you, when you linked it, the day you last asked it anything, written at most once a day, and whether our bot may remind you there about your own plan: on, off because you turned the reminders off, or paused after you blocked the bot, until you write to it again. It holds no name, no chat and nothing you sent it. Unlinking it, from your account or from the chat, removes it, and so does deleting your account.
• While a device is connected: that it is connected, and where. It is deleted the moment you disconnect, and no history of past connections is kept.

What we store about our network

We keep figures about how our own servers are running, for 7 days. They are about the servers, never about a person.

The free web proxy

Our free web proxy opens a site for you through one of our servers, with no account. While you use it, that server holds a session in its memory: a random identifier, the country you chose, the cookies the sites you visit set, and what it needs to pass their pages to you. It sets one cookie of its own, on the proxy server's own address, that holds the session and nothing else. When you end the session, or leave it unused, all of it is gone.

We do not record which sites you open through it, the pages you view on them or your address, and nothing about a session is ever written to disk. To keep the service fair, a session counts its own requests and bytes while it is open, and each server counts only its totals, never a person. The sites you visit see our server's address instead of yours; a site you sign in to through the proxy still knows your account with it.

Signing in

When you sign in, we keep only a scrambled form of the sign-in your app or your browser holds, and it lapses after 30 days without a request. In a browser, closing the tab usually ends the browser's copy, but the browser may restore it with the tab; signing out removes it. To keep the sign-in and sign-up pages from being abused we keep short-lived counters. They hold scrambled marks that cannot be turned back into your network address, and they are gone within 24 hours. A password reset link is stored only in a scrambled form and works for a limited time, and so is the link that gets an account signed in by number back in, which also stops working if the email it was sent to is changed or removed.

Why we process it, and under what basis

• Running your account, the tunnel and the free web proxy rests on performing our contract with you, or the service you ask for when you open a site through the proxy: it cannot exist without it.
• Rate limits and abuse controls rest on our legitimate interest in keeping the service available and secure for everyone, weighed against your rights; the counters live for 24 hours at most.
• Billing records rest on a legal obligation: accounting and tax law requires us to keep them.
• Mail about your own plan, such as a renewal reminder or a note about a device you have not used, rests on our legitimate interest in keeping an existing customer informed about their own account, balanced by a one-click way out in every such message. It is never mail about anyone else's account and never advertising for anything you have not bought. A reminder about your own plan from our bot, in a messaging account you linked such as Telegram, rests on the same legitimate interest: the bot writes to you first only when paid time that does not renew is about to end or a renewal payment did not go through, and every such reminder has a button that stops them.
• Answering a request from you, from an authority or about a security report rests on performing our contract with you, a legal obligation, or our legitimate interest in running the service safely, depending on which one is asking.

None of this rests on your consent, so there is no consent to withdraw.

Who else handles anything

• Our payment provider handles payments and sees what a payment needs. Its own privacy policy covers the payment itself. It tells us only what What we store about your account lists for a payment, a membership and a dispute, and nothing about your card or your wallet.
• The company that delivers our email sends the messages your account needs: a reset link, a receipt, the notice that an account was deleted. It therefore sees your address and the message we sent you. It keeps its own delivery records of those messages, for as long as its own policy says; they are its records and not ours, and deleting your account does not reach them.
• The network that serves this website and our service delivers their pages and answers, and sees the requests for them: the address they come from, what was asked, and when. It does not see the sites you open while you are connected.
• Telegram, if you link it or buy through our bot: sees your Telegram account, whatever you send the bot and what the bot sends you, a reminder about your plan included. A purchase made with Telegram Stars is a payment Telegram itself processes; write to us for a refund of it and we complete it through the bot. Anything inside the chat is otherwise covered by Telegram's own privacy policy, not ours.
• The service that runs our bot check, on the forms to sign in, sign up, reset a password, use a recovery link, open an account at checkout, open a site through our free web proxy or send a security report, and on the page our apps and browser extension open when you sign in or sign up in them: on the forms it runs only from the moment you start on one, and on that page as it opens, to tell a person from an automated script. It sees what any page of its own would see, your browser, your address and how the form was used, and keeps its own records of that under its own privacy policy. We send it the check's answer to verify and nothing else about you.
• Nobody else. The payment page loads our payment provider's form so that you can pay, and the pages with one of the forms above load the bot check once you start on one, as does the page our apps open for it. Apart from those, this website loads nothing from anyone else, and it sets no cookie at all; the bot check may keep a cookie of its own, in its own frame. Cookies and storage lists everything it keeps on your device, in its entirety, and a test on every build keeps that list honest.

Write to support@kazavpn.com and we will tell you which companies those are.

Transfers outside the European Economic Area

Some of the categories named above process outside the European Economic Area. Where one does, the transfer is protected by Standard Contractual Clauses or another safeguard the law allows, so the protection travels with the data. Subprocessors and international transfers names every category, its purpose, what reaches it, the country it processes in and the safeguard, in one place.

Automated decisions

Nothing about your account is decided by a machine alone in a way that produces a legal effect or similarly affects you. A suspension for acceptable use is a person's decision, never an automated one, the way the terms describe.

Backups

Your account records are backed up, and every backup is encrypted. A copy is kept for 30 days at the most. A backup holds the account data listed above, except the record of a connected device, which is never copied into one. It holds nothing else: we keep no activity logs, so there are none to copy.

Requests from authorities

Because of how the service is built, the most a valid legal request can reach is what this page already says we hold, and that is a short list. It cannot produce who used a given server address at a given time in the past, because that is never written down. We respond only to valid process in our jurisdiction. Our law enforcement guidelines say more.

Retention and deletion

• Account data: until you delete your account. You can delete it yourself, from your account page: it asks for your password, or your account number if you sign in with one, then removes your account, your devices, your membership and the record of the messages we sent you, cancels the membership so it does not renew, and signs you out. How deleting your account works sets out the steps and everything that survives them. You can also write to support@kazavpn.com and we complete it within 30 days. Time you have already paid for is not refunded automatically; write to us first if you want to ask about a refund.
• What survives a deletion, in its entirety: our own administrative record of the account, including that it was deleted and the lines it holds about the payments, memberships, refunds and disputes on the account, with the references, plans, days and amounts that What we store about your account lists for them and the reason our team gave for anything it did by hand, which holds an account reference and never your email address, your card or your wallet, and which is deleted after 365 days; the note to close a paid plan, only until our payment provider confirms the plan is closed; the encrypted backups described above, which hold the account until they age out (30 days at the most); the records of past payments that our payment provider is required by tax law to keep, which are theirs to hold and not ours to delete; anything you wrote to us, which stays in our support inbox with whatever you put in it until you ask us to delete it; the delivery records kept by the company that delivers our email, of the messages we sent you, including the one confirming the deletion, which are its records, kept for as long as its own policy says, and which belong to the processor listed under Who else handles anything above; and a mark that the address you signed up with has had its free trial, so that deleting an account does not buy a second one, made with a key kept apart from our records so it cannot be turned back into your address, holding nothing else, and kept until we decide a limit. Nothing else about the account remains anywhere.
• Your membership, your payments, your payment provider reference and a payment dispute: until you delete your account. A refund our team started in Telegram: until the refund is done. The note to close a paid plan: until our payment provider confirms the plan is closed. A gift code you redeemed: its link to you until you delete your account, and the code itself until 365 days after it was used or cancelled.
• A messaging account you link: until you unlink it or delete your account.
• While a device is connected: until you disconnect.
• A free web proxy session: in memory only, until you end it or leave it unused.
• Figures about how our own servers are running: 7 days.
• Your sign-in: 30 days of inactivity.
• Backups: 30 days at the most.
• Mail you send to support: it stays in our inbox until you ask us to delete it.

What happens if you do not provide something

An email address and a password, or an account number, are required to open an account: without one of them there is no account to run the service on. Anything else you give us, such as a name for a device, is yours to set or leave as it is; withholding it changes nothing about the account itself.

Children

An account is for someone at least 16 years old, or the age of digital consent where they live, the same age the terms state. We do not knowingly hold an account for anyone younger; write to us if you believe we do.

Your rights

You can ask what we hold about you, ask for a copy of it, have it corrected, have it erased, ask us to hold it while a question about it is settled, take it to another service, object to what we do with it, and complain to your data-protection authority. Your data and your rights sets out how to start each one, what an access request can include, what a request costs, and how long we take: one month from the day it reaches us, and up to two further months for a complex or repeated request, with the reason given inside the first month.

Contact

Questions about privacy: support@kazavpn.com.