Service Policies
Privacy Policy
Last updated: October 2026
This policy applies to the processing of personal data through the CitiVPN marketing website, user panel, and subscription services. It explains what data is collected, how it is used, and the controls available to users. Third-party payment pages are governed by their own privacy policies; details are provided below.
Account and Order Data
You can create an account with a username and password; no email address is required. The username identifies your account, and password verification data is used to authenticate logins. Keep your login details secure. Do not send passwords or complete subscription links in support tickets.
Order records include the selected plan, payment amount, order status, and transaction reference information. They are used to activate service, verify payments, process refunds, and resolve billing disputes. Account traffic usage and plan status are used to calculate remaining allowances and service access, not to infer browsing activity. When you submit a support ticket, the service processes the issue details and attachments you provide.
No-Logs Policy and Connection Handling
CitiVPN does not record which websites users visit or store browsing histories, lists of destination addresses, or transmitted content. Traffic measurement is used only to manage plan allowances; it does not create detailed website visit records or browsing profiles.
Establishing connections and diagnosing faults may require temporary processing of operational status. Such status is used only as needed to provide a connection or address an active issue. It is not retained long-term as historical connection logs linked to an account and is cleared when no longer needed. Accumulated traffic usage and order records are service administration data, not browsing logs.
Site Analytics and Local Storage
Website analytics help us understand page visits, referral sources, device and browser categories, and feature usage so we can improve content and investigate page errors. Analytics are limited to this website and do not extend to sites users visit through international routes. Passwords, subscription credentials, and support ticket content are not used as analytics data.
Cookies and local storage help maintain login sessions, remember language preferences, and save essential interface settings. Authentication credentials stored in the browser are used for subsequent verification. You can restrict cookies or clear site storage through your browser settings; doing so may require you to log in again and will reset saved preferences. Clearing browser data does not delete your server-side account.
Third-Party Payments and Data Sharing
CitiVPN supports Alipay / WeChat Pay / USDT. Payments are processed by the relevant payment channel, which may handle payment identity and transaction data under its own rules. CitiVPN uses order references and payment results to confirm receipt; users are not asked to provide payment account passwords in support tickets.
This service does not sell personal data. If a service provider must assist with payment verification or necessary technical operations, only the data needed for that purpose is shared, and its use is restricted. When disclosure is legally required, the scope of the request is checked against applicable requirements. Please read the privacy notice on any third-party page before proceeding.
Data Retention and Deletion Requests
Account data is retained for as long as needed to provide the service and maintain the account. Order and refund records are retained for as long as needed to reconcile transactions, handle disputes, and meet applicable legal obligations. Analytics data is kept only for the time needed to achieve its purpose, then deleted or de-identified. There is no single permanent retention period for all data.
Users can sign in to the panel and use the support ticket portal to request access to, correction of, or deletion of account data. Account ownership must be verified before a request is processed. Deletion may affect continued use of the subscription and account. Records that must be retained by law will have their use restricted, and the reason for any delay in deletion will be explained. Residual data in backups is removed as backups rotate and is not restored for routine service use.
Policy Updates and Privacy Questions
Updates to this policy will be published on this page, and the month shown at the beginning will be updated. Important changes to the scope of data collection or its purposes will be announced on the website or in the user panel. Where separate consent is legally required, the relevant process will be completed first.
To ask how data is used or exercise your rights, submit a support ticket through the user panel and describe your request. Provide only the information needed for verification and processing. See the Terms of Service for service use and refund arrangements.