We never write down where you go online
We do not record the sites you visit or the names you look up through KazaVPN, and this page lists what we do keep.
On this page
Your account
| What | Kept | How long | What it means |
|---|---|---|---|
| Your email and language | Kept | Until the account is deleted | Your email is how you sign in. If you sign in with an account number instead, we hold an email only if you add one to get back in. We use your language to write to you. Deleting your account removes both from the account; older encrypted backups expire later. |
| Your name | Kept | Until the account is deleted | The name you give when you open an account, or that our Telegram bot takes from your Telegram profile when it opens one for you. We use it to greet you in our emails, and you can change it on your account page. It is never a way to sign in. Deleting your account removes it from the account; older encrypted backups expire later. |
| Your password | Kept | Until the account is deleted | We store a hash of your password, not the password itself. If you forget it, use a reset link to set a new one. |
| Your account number | Kept | Until the account is deleted | If you sign in with an account number, we keep a scrambled copy of it, not the number itself, so we can never show it or send it to you. Getting back in by email replaces it with a new one; deleting your account removes it, and older encrypted backups expire later. |
| Your answer about a recovery email | Kept | Until the account is deleted | If you sign in with an account number and choose to stay private rather than add an email, we keep that answer and the day you gave it, so we do not ask again. Deleting your account removes it. |
| Your devices | Kept | Until the account is deleted | We keep the name you gave each device, its type, app version, and what it needs to connect. You can see and remove your registered devices from your account. |
| Your membership and its dates | Kept | Until the account is deleted | The membership you have and each one before it: the plan, whether it is running, overdue or cancelled, whether it is a free trial, the dates it covers, whether it renews, and when it was made and last changed. One you paid for also holds which payment provider took the payment, one that renews also holds that provider's reference for it and when we last checked it with them, and one a refund or a dispute ended early holds the day it ended. One that turned out to be the later of two renewing plans paid at once also holds when we found that, and the payment provider's references for the payment we gave back and for the refund. It is how your apps know what your plan includes, and your account page shows the one you have now. |
| The mark that says you had your free trial | Kept | Until it is deleted | Every new account gets one free trial of KazaVPN Premium, once per person. When you confirm your address we keep a scrambled mark of it, made with a key that is stored apart from our records, so the mark cannot be turned back into your address. It stays after you delete your account, so the same address is not given a second trial, and it holds nothing else: not the address, not which account it was, only the day it was made. |
| Your payments | Kept | Until the account is deleted | For each payment: the plan, the way you paid and the coin if you paid in crypto, the amount and currency asked and the amount that arrived, where it stands, the days it gave and to which membership, which payment provider took it and its reference there, and when it was opened, when its price stops being valid, when it was paid and when it last changed, and the address of its payment page while it can still be paid, so you can come back and finish, emptied once it is paid, refused or runs out. For a payment in Telegram Stars, also the number Telegram uses for whoever paid, so our team can give it back to them. Press pay twice in a short time and the second press opens the page the first one made. |
| Your payment provider reference | Kept | Until the account is deleted | If you buy a membership that renews: which payment provider holds your record, its reference for you, which ties your account to that record, and when it was made. We also keep the date of your last successful payment, which is what limits reminders about your plan. |
| Card and wallet details | Never written | Nothing to keep | You type your card only into our payment provider's own form, so its number, expiry date and security code never reach us. When you pay in crypto, we never keep your wallet address or the transaction. |
| Payment disputes | Kept | Until the account is deleted | If your bank disputes a payment: which payment provider it is at and that provider's references for the dispute and for the payment, the amount and currency, the reason your bank gave, where it stands, the day an answer is due, and when it was opened and last changed. If the bank decides against us, we also keep the day it did, which stops new purchases until our team lifts it. |
| Refunds in a messaging app | Kept | Until the payment provider confirms it | When our team gives back a payment you made in a messaging app you linked: the payment, the number that app uses for you, who on our team asked, why and when, how many times we have tried and when we last did, and the app's answer if it refused. It is deleted once the refund is done. |
| Closing a paid plan | Kept | Until the payment provider confirms it | After you delete your account, or after a refund or a dispute ends a membership that renews: the payment provider's references for the plan and for you, which provider holds them, when we asked, how many times we have asked and the last answer. It holds no account and no address. |
| Which mail and reminders you were sent | Kept | Until the account is deleted | It records which type of email, or which reminder about your plan from our Telegram bot, we sent and when, so it is not sent twice. The entry is linked to your account, but does not contain the message text. |
| An email we could not send yet | Kept | 12 hours | When an email to you cannot go out at once, we keep what it is about (a date, an amount, a device's name) and try again. Never your address, a link or the message text. It is deleted the moment the email is sent, or soon after if it never can be. |
| A notice that your sign-in details changed | Kept | 12 hours | When your account number is replaced, your recovery email is changed or removed, or a Telegram account is connected, we email the address you had confirmed before the change. Until that email is sent we keep that address, the type of notice and the time. Never your account number, a link or the message text. It is deleted the moment the email is sent, or soon after if it never can be. |
| Gift codes you redeemed | Kept | 365 days | For every gift code we keep a scrambled form of it and never the code itself, the plan and the days it gives, who made it and when, in which batch, our team's note on it and the payment that bought it if one did. Once you redeem it, also which account redeemed it and when and the membership it gave; if it is cancelled instead, who cancelled it and when. Deleting your account removes the link to you, and a code that was used or cancelled is deleted after the time shown here. |
| The last email we send you | Never written | Nothing to keep | We do not keep a record that we sent the final account-deletion email. Any delivery record kept outside KazaVPN is covered by our privacy policy. |
| Mail you send support | Kept | Until it is deleted | Your message stays in our support inbox with whatever you included. Deleting your account does not remove it; ask us to delete it separately. |
| Your messages to our team | Kept | 90 days | What you write to our team from the Support page and our answers, so we can help. The time counts from the day the conversation is closed, and deleting your account deletes them at once. |
| A security report you send us | Kept | 90 days | What you report with the form on our security page and the address you gave for our answer, and nothing else about you. The time counts from the day the fix is published. |
| A messaging account you linked | Kept | Until the account is deleted | We keep the number that app uses for your account, the dates you linked and last contacted us, and whether you want our bot's reminders about your plan. This link record contains no message text. Unlinking removes it from the active account; older encrypted backups expire later. |
| Your Smart DNS home | Kept | 30 days | If you register a home for Smart DNS, we keep only its current internet address, the country you choose, when you confirmed it and when it expires, and a scrambled mark of the key your router uses to update it. No address history or record of what you watch. Your home is forgotten when you remove it, delete your account or your paid access ends, or its confirmation expires. Our team cannot read the address, and our backups never contain it. |
Connections and account access
| What | Kept | How long | What it means |
|---|---|---|---|
| Where you are connected now | Kept | Until you disconnect | While you are connected, we keep which server your device is on and the address it has there. Disconnecting removes it, and our backups never contain it. |
| Where you were connected before | Never written | Nothing to keep | We do not keep a list of past connections, not even in our backups. |
| Connection data on the VPN server | Kept | Until you disconnect | The VPN server keeps only the details your connection needs, and nothing about what you do. Those details may remain after you disconnect if the server is unavailable. |
| Being signed in | Kept | 30 days | A scrambled copy of the sign-in your app carries, so it does not ask for your password every morning. Signing out drops it. When our Telegram bot answers you, it uses a sign-in like this that lasts only long enough to answer you. |
| A counter against abuse | Kept | 24 hours | We briefly keep counters for sign-in attempts, free web proxy sessions and some account actions to protect the service. A counter about your connection holds a scrambled mark that cannot be turned back into your network address, and every counter expires on its own. |
| Data used on the Free plan | Kept | 30 days | For Free accounts only: how much data you used in the current period, so the free servers stay fair for everyone. One number, nothing about where it went, kept in memory and forgotten when the period ends. |
| A reset link you asked for | Kept | 60 minutes | We keep a scrambled copy of the reset link, not the link you receive. It stops working after you use it or it expires. |
| A link that confirms your address | Kept | 7 days | We keep a scrambled copy of the confirmation link, tied to your account. It stops working after you use it or it expires. |
| A link to get back in | Kept | 60 minutes | If you lose your account number, we keep a scrambled copy of the link we email you, not the link itself, and never your number. It stops working after you use it, when it expires, or if you change or remove your email. |
| A link to connect or sign in with a messaging app | Kept | 10 minutes | When you link a messaging account, open your account from our bot, or sign an app in with that messaging account, we keep a scrambled copy of the one-time link or code, with the account it is for or the number that app uses for you, and, for the link that opens an account, the name on your messaging profile. It works once and stops working when it expires. |
| A code to move one account into another | Kept | 10 minutes | When you move one of your accounts into another, we keep a scrambled copy of the one-time code and which account it gives up. It works once and stops working when it expires. |
| A count of your messages to our bot | Kept | 2 minutes | To stop one chat from flooding our Telegram bot, it counts how many of your recent messages it answered, by the number that app uses for you, in its memory only. The count expires on its own. |
| A gift code you sent our bot | Kept | 11 minutes | When you send our Telegram bot a gift code, it keeps the code in its memory with the number that app uses for you until you tap the button to use it or it expires, so the button never puts the code back into the chat. |
| A sign-in waiting for your answer in our bot | Kept | 11 minutes | When you ask our Telegram bot to allow a sign-in with a code, it keeps the code and the chat in its memory with the number that app uses for you, until you tap the button to allow it or the question expires. |
| Your leak test results | Kept | 30 seconds | When you test whether your lookups leak, we note which lookup servers asked for the test names so the page can show you, then forget them on our own. |
| A counter on the leak tests | Kept | 10 seconds | To stop floods, we count the leak-test requests from each network address in memory, and the count expires on its own. |
| Your free web proxy session | Kept | 2 hours | When you browse through our free web proxy, the proxy server holds your session in its memory only: the place you browse from and the cookies the sites you open set. It is forgotten when the session ends. We never keep the sites you visit. Your address is never written down: the counter that limits sessions holds only a scrambled mark of it, for about an hour. |
Activity records we do not keep
| What | Kept | How long | What it means |
|---|---|---|---|
| A record of who connected here | Never written | Nothing to keep | Never kept. It would be a record of which address reached a VPN and when, and that is the one record we refuse to hold. |
| The names you look up | Never written | Nothing to keep | We do not record the names looked up through KazaVPN. |
| Connections through networks that block VPNs | Never written | Nothing to keep | We keep no activity log of these connections either. The connection details we do keep are listed above. |
| What your browser reveals | Never written | Nothing to keep | Never kept. When you test what your browser reveals, our server tells your browser the address it sees and keeps nothing. |
| A record of who ran a leak test | Never written | Nothing to keep | Never kept. Our leak-test server writes no log of lookups or addresses. |
| What you do on this website | Never written | Nothing to keep | We do not use website analytics to track the pages you read. Our privacy policy explains what serving a page needs. |
We keep separate records needed to run the service, but they are not a history of your browsing. Account information can remain in encrypted backups until those backups expire.
How far this page goes
You can read what this page claims, watch what the apps send, and hold us to it. What nobody can do from a page like this one, ours or anyone else's, is look inside a running server. No outside auditor has been inside ours. What stands in its place is this page.
Questions about what we keep
Do you keep my IP address?
We keep no record of which address connected to KazaVPN, or when. A counter against repeated sign-in attempts holds a scrambled mark that cannot be turned back into your network address, then expires on its own.
Do you keep a history of my connections?
No. There is no list of past connections, not even in our backups. What we hold while you are connected, and when it goes, is in the list above.
What is in your backups?
Your account information, kept encrypted until those backups expire. They never hold where you were connected.
How do I have my data deleted?
Delete your account from your account page; the Delete account page lists what goes at once and what can remain for a time. Mail you sent support stays until you ask us to delete it.
Who can I ask about what you keep?
Write to support@kazavpn.com, and we will tell you what we hold about you and why.