Skip to content
Cipher VPN
Sign inTry it free

Cipher VPN

Privacy Policy

1. Introduction

This Privacy Policy explains how Cipher VPN ("Cipher VPN", "we", "us", "our") collects, uses, transfers, and protects your personal information when you use our websites, apps, and other services (collectively, the "Services"). By using Cipher VPN, you agree to the collection and use of information in accordance with this Policy. We process personal data in compliance with applicable data-protection laws, including the EU GDPR and Russian Federal Law No. 152-FZ.

2. Information We Collect

We collect only the minimum data needed to provide the Services, which may include:

  • Account information: name, Telegram ID and/or username (if applicable).
  • Payment data (for paid subscriptions): amount, currency, date; last 4 digits of the card; payer email for fraud prevention.
  • Communication data: email messages to support; limited device information to resolve technical issues; limited chat data (OS etc.).
  • Usage data: which Cipher VPN services/features you use and how; access logs (referral URLs) for analytics; crash & diagnostic reports.

3. How We Use Your Information

We may use the collected information to:

  • Manage your account;
  • Provide, maintain, and improve our Services;
  • Process payments and prevent fraud;
  • Respond to support requests and technical issues;
  • Analyze usage trends and measure ad effectiveness;
  • Send important account-related and marketing notifications.

4. Disclosure of Information

We do not sell or trade your personal data. We may share it only:

  • With trusted service providers for payments, support, email delivery, analytics, and advertising, under strict confidentiality agreements;
  • With competent authorities when legally required or to protect our rights, ensuring requests originate from countries recognized as democratic;
  • In case of merger, acquisition, or asset sale, in which case the acquirer will be bound by this Policy.

5. VPN Server Locations

Cipher VPN operates servers worldwide. Some may be in countries with lower democracy scores. Using such servers may entail higher government interference risk. We recommend connecting to servers in jurisdictions with strong privacy laws. Cipher VPN does not directly cooperate with governments in low-democracy countries nor transfers user data there, but cannot be responsible for local governmental actions.

6. Data Retention

We retain personal data only as long as necessary to provide Services and meet legal obligations:

  • Support tickets - 3 years after resolution (device data max 6 months).
  • Data no longer needed is deleted or anonymized.

7. Your Privacy Rights

Depending on your location, you may have the right to access, rectify, delete, or obtain a copy of your data; object to or restrict processing; or lodge a complaint with a data-protection authority. Contact us to exercise these rights; verified requests are answered within 30 days.

8. Security Measures

We employ physical, technical, and administrative safeguards, including data encryption in transit and at rest, firewalls, intrusion-detection systems, strict staff access policies, and security training. In the unlikely event of a data breach, affected users will be notified promptly and remedial action taken.

9. International Data Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards, such as EU Standard Contractual Clauses, to protect your rights. By using Cipher VPN, you consent to such transfers.

10. Business Transfers

If Cipher VPN undergoes a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity, but will remain subject to this Policy.

11. Children

Cipher VPN is not intended for children under 18. We do not knowingly collect data from minors. If we discover such data, it will be deleted immediately.

12. Updates to This Policy

We may update this Policy periodically. Material changes will be announced by email or prominent notice on our websites before they take effect. Continued use of the Services indicates acceptance of the revised Policy.

13. Contact

For questions about this Policy or our data practices, contact us at: