Privacy Policy
Last updated: July 2026
This policy explains how X4VPN handles data when providing its website, user panel, and cross-border network acceleration subscription service. Account management, transaction fulfillment, and site analytics each serve distinct purposes and should not be confused with browsing activity through a subscription connection. Please read this policy together with the Terms of Service before using the service.
Account and Order Data
X4VPN does not require an email address to create an account; a username and password are sufficient. If a user voluntarily provides an email address or other personal information in a support ticket, it is used only to handle that request. Please avoid submitting information unrelated to the issue.
Account data is used for identity verification, sign-in, and subscription management. Order records include the selected plan, payment amount, payment status, and transaction-related information. They are used to activate the service, verify payments, and handle refunds. Traffic usage and reset status are used to enforce plan terms; usage measurement does not mean that browsing content is recorded.
Anonymous No-Logs Approach
X4VPN follows an anonymous no-logs policy. It does not record which websites users access through subscription connections, store browsing content or history, or maintain connection logs that can be used to trace an individual's activity. Connection logs used to associate users with their browsing activity are not retained persistently.
Account and order details, remaining plan traffic, and troubleshooting information voluntarily submitted by users are not browsing logs. When reporting an issue, please provide the error message, client platform, and selected route where possible. Avoid sending full browsing histories, passwords, or subscription credentials. An anonymous no-logs approach does not mean that account transactions have no records, nor does it replace the need to protect your device and account.
Site Analytics and Local Storage
Site analytics help us understand page visits, referral sources, and entry-point clicks, so we can assess whether content is easy to find and features are working as expected. This analytics data relates to interactions with the website and user panel; it is not used to record third-party websites accessed through subscription connections.
Cookies and local storage may be used to maintain sessions, sign-in status, and language preferences. The user panel stores an authentication token in the browser's local storage to make account requests. You can manage or clear this data in your browser settings. Clearing it may require you to sign in again, and some preferences may return to their defaults. Sign out after using a shared device, and do not share browser storage contents.
Payment Processing and Data Disclosure
X4VPN supports Alipay / WeChat Pay / USDT. Payments are processed by the relevant third-party payment service or transaction network. X4VPN updates order status based on transaction receipts and does not ask users to submit payment account passwords on this site. Please refer to the third party's own privacy policy for how it handles information it receives.
Data is processed only as needed to provide the service, resolve issues, and meet necessary obligations. When support providers assist with service delivery, processing should be limited to the relevant purposes and necessary scope. If applicable law requires data to be disclosed, it is handled only to the extent required. Do not send payment keys or complete sign-in credentials in support tickets.
Data Retention and Deletion Requests
Account data is retained for as long as needed to provide account services. Order, refund, and dispute records are retained as needed for transaction verification and applicable legal obligations. Support ticket data is used only while handling an issue and any necessary follow-up. Once retention is no longer necessary, the relevant data should be deleted or processed so it can no longer be linked to an individual. No fixed retention period is set without explanation.
Users can request access to, correction of, or deletion of account-related data through a user panel support ticket. Account ownership must be verified before processing a request. Records related to open orders, refund disputes, or legal retention obligations may not be deleted at the same time; reasons should be provided. Deleting server-side data does not automatically clear local storage on the user's device.
Policy Updates and Questions
When this policy changes, the updated content will be published on this page and the date at the top will be revised. Significant changes to processing purposes, data categories, or user rights will be communicated through the website or user panel. Where authorization is legally required for new processing activities, they will begin only after the necessary authorization has been obtained.
If you have questions about this policy, the scope of data processing, or the progress of a request, submit a support ticket through the user panel and describe the relevant account and request. Before submitting, check attachments and remove personal information and authentication credentials that are unrelated to the issue.