VPN Services Privacy Notice
This VPN Services Privacy Notice applies to UltraAV’s virtual private network products, services, or features (“VPN Services”) and should be read in conjunction with our Privacy Policy which is hereby incorporated by reference. Where there is an inconsistency between the Privacy Policy and this notice, this VPN Services Privacy Notice shall prevail with respect to any VPN Services.
For ease of reference, we use the term “VPN browsing activity” in this privacy notice to refer to online activities you conduct via VPN connections initiated with our VPN Services. This includes what you are browsing, viewing, or doing online via the VPN connection.
Key Assurances
- Our VPN Services do not record your VPN browsing activities in any way that can be associated back to you. When you use a VPN connection, we do not store any information that identifies what you browse, view, or do online via that VPN connection. The exception is when you choose to communicate with us (such as via chat or email) over a VPN connection and have chosen to identify yourself to us. While we log what domain names that users visit (but not full URLs), we do not log them in combination with anything that identifies an individual or device.
- Data over our VPN connections is encrypted, and we do not inspect or record the contents of what you are browsing, viewing, or doing through them (unless, of course, you are using the VPN connection to communicate with us). For your protection, we may block access to certain resources that are known to be malicious.
What information we do and don’t collect regarding VPN usage
- Our VPN Services do not log or otherwise record IP addresses, device identifiers, or any other form of identifier in combination with your VPN browsing activity. Simply put, this means that our VPN Services do not store any information about what any specific user browsed or accessed through a VPN connection.
- When you initiate a VPN connection, we collect your IP address, immediately encrypt it, and delete it at the end of your VPN session. We use this IP address for the purpose of fraud prevention if you submit a payment to us during the VPN session. The IP address is not associated with your VPN browsing activity. This means that we are not able to share your VPN browsing activity with anyone – whether it’s an ad network or government agency – because we simply don’t store that information.
- When you access a site through a VPN connection, your IP address appears to that site as the IP address of one of our VPN servers (what we call a “public” IP address). Because those public IP addresses are used by multiple users and we do not record the actual IP addresses of users who use those public IP addresses, we are not able to connect activity originating from a public IP address to activity conducted by any individual user.
- Our VPN Services log device hashes, which are used to identify devices and associate them with other data we collect (such as providing support, understanding how you interact with our VPN, and other analytics and marketing purposes). Device hashes are not linked to VPN browsing activity. We use device hashes because we do not require users to register an account to use some of our VPN Services and need a way to distinguish between different users and carry out the activities above.
How we use IP Addresses
As written above, we do not log or otherwise record IP addresses in connection with your VPN browsing activity.
In the interest of transparency, we do collect and use IP addresses in these other contexts:
- protecting against fraud in connection with financial transactions with us
- deriving non-identifiable items of information, such as your approximate geographic location and information about your internet service provider or carrier (we use this information to provide a better user experience, such as by connecting you with VPN servers nearer to you and by analyzing the connection quality with different internet service providers)
- enabling us to attribute our advertisements and service features to actions taken in response to such advertisements and service features
VPN Security
Our VPN servers are hosted with infrastructure providers that do not require us to collect any information about what our users are doing via a VPN connection. If any such provider were to require us to collect such information, we would stop doing business with them and find an alternative provider.
Even if a government agency physically seizes one of our VPN servers and succeeds in breaking disk encryption on those servers, they would not find any logs or information that would reveal what any individual user was browsing, viewing, or doing online via a VPN connection.