Effective August 28, 2026.
To operate the service, we collect the minimum information necessary: your email address at registration, your subscription and plan status, and aggregated technical statistics (data volume transferred over a period, date of last connection), none of it tied to the websites you visit.
The data we collect is used solely to operate the service: authentication, subscription billing, technical support, and abuse prevention (for example, exceeding free-plan limits). We do not sell your data and do not share it for advertising purposes. The cases where data does reach a third party are named below: the payment provider when you pay, and web analytics.
If you use our @my404vpn_bot bot, we store your numeric Telegram ID, your username (if you have one) and your chosen interface language. No password or email address is needed for this: the account gets a service address of the form tg-<id>@telegram.invalid, and no mail is ever sent to it.
We also keep your plan and its expiry date, your referral code and who invited you, and the text of your support requests together with our replies: otherwise a request could not be answered. One-time codes for linking an account or signing in to the website are stored for no longer than a day and are deleted automatically.
We do not read or store your conversations in the bot beyond the support requests themselves. The bot cannot see the contents of your VPN traffic, nor can any other part of the service.
Technically necessary cookies and browser local storage: your account login session, language preferences, confirmation that you have agreed to this policy, and a note that you have already rated an article or tool with the "Helpful" button. The rating itself is a counter on the page: we store only its value, without your IP address, browser fingerprint or any other identifier. No sign-up is needed, and we do not know who pressed it.
In addition we use Google Analytics 4, which sets a _ga cookie and helps us understand which pages are used and which are not. When a payment is confirmed we send Google the fact of the purchase: the amount, the plan and the payment identifier. The sites you visit, the addresses and the contents of your traffic are never sent there: we do not collect them in the first place. There are no ad networks or retargeting on this site.
You can turn analytics off with your browser: “Do Not Track” mode, a blocker, or by disallowing third-party cookies. This does not affect the VPN or your account.
The service’s server infrastructure is hosted in data centers within the European Union. We take reasonable technical and organizational measures to protect data from unauthorized access.
Account data is retained for as long as the account is active. You may request deletion of your account and all associated data at any time through the app settings ("Account" → "Delete Account") or by contacting support. Requests are processed within 30 days.
You may request a copy of your data, its correction, or its complete deletion at any time by writing to hello@404vpn.io.
We will notify you by email of any material changes to this policy before they take effect.
For questions related to this policy, write to hello@404vpn.io.
Last updated: August 28, 2026.