Privacy Policy

Key points

The highlights first. Each one is explained in full below:

• We collect only what we need to provide the service: account, device, order and usage information, the support materials you choose to send us, and usage statistics from the website and the clients.
• Payment card details are handled directly by the payment provider: we do not store full card numbers and receive only necessary records such as the order number and payment status.
• We do not sell your personal information, and we do not use the content of your communications for advertising profiling.
• You are always in control: you can access, correct, export or delete your information, or close your account, simply by emailing us.
• We use very few cookies: only for sign-in, language and usage statistics. Every one of them is listed below.

1. Who this policy applies to and who is responsible

This Privacy Policy applies to the AnboVPN website; the Windows, macOS, Android and Linux clients; the account system; data plans; dynamic and dedicated IP resources; customer support; and related operational activities.

In this Privacy Policy, “AnboVPN,” “Anbo,” “we,” “us” and “our” refer to Anbo Technology LLC and the AnboVPN service that it operates. Anbo Technology LLC is responsible for the processing of personal information described in this policy (the equivalent of a “controller” of personal information under applicable law).

Third-party clients, websites, payment channels or other services that you choose to use may be subject to their own privacy policies. Please refer to those policies.

2. Information we collect

Information you provide to us:

• Account information: your email address, a secure hash of your password (we do not store your password in plain text), and an invitation code if you enter one;
• Support and feedback: questions, screenshots and other material you submit through tickets, live chat or email; diagnostic logs you choose to submit, together with the necessary device and diagnostic information that accompanies them (log contents are redacted, but screenshots you attach are not processed automatically, so please check what they show first);
• Order information: the type, size, price and validity period of the resources you purchase.

Information generated automatically when you use the service:

• Device and app information: device type, operating system, client version, language, time zone and necessary diagnostic information;
• Device identifier: if you use the client without registering, we use a device identifier to create a guest account automatically and to prevent the same device from claiming the free data more than once;
• Usage information: data balance, data consumption and resource validity periods;
• Website visit information: visit times, pages, referral sources, basic browser information, and the visitor ID listed in the “Cookies” section below.
• Usage statistics: how you use the website and the clients (including the mobile app), such as the pages you view, the features you click and how far you get in the purchase flow, together with your device type, operating system, language and IP address, so that we can improve the product. Once you sign in, these records are linked to your account. We do not record what you type, your chat content or the websites you visit through the VPN. You can turn this off at any time in the “Usage statistics” setting of the clients and the mobile app. In the European Economic Area, the United Kingdom and Switzerland, the website starts collecting only after you agree.
• Connection status information: to tell whether a route is working properly, the client reports the necessary connection status information to our servers;
• IP lookup tool: The queried IP and normalized result are stored once per IP in our database to avoid repeated calls to data providers. We do not store the query initiator, query count, or per-request history, and the result is not linked to your account. The IP is sent to IP2Location.io, ipapi.is and proxycheck.io only when our database has no result.
• Other IP tools: Bulk location lookup, IP badges, domain checks, and proxy tests share the same deduplicated IP result database described above. An IP is sent to IP2Location.io, ipapi.is and proxycheck.io only on a database miss. Bulk IP-to-ASN lookup sends addresses to RIPEstat. Domain checks also send the domain to public DNS resolvers and rdap.org and contact the domain's own server. Proxy tests connect from our server to the proxy you provide; proxy credentials are used only for that request. We do not store the query initiator, query count, or per-request history or link results to an account. Log analysis, random IP generation, and IP range calculations run entirely in your browser and upload nothing.

Information from third parties:

• Third-party sign-in: if you choose to sign in with Google or GitHub, we receive the email address and basic profile information that you authorize from that provider;
• Payment providers: transaction status, such as whether a payment succeeded, and the order number.

Full payment card numbers, expiry dates and security codes are handled directly by the payment provider; they do not pass through our servers and are not stored on them.

3. Connection, IP and data usage

To establish connections, meter data usage, maintain resources, prevent abuse and troubleshoot problems, we may process the IP resources assigned to you, connection times, connection status, region selections, data usage, client versions, error codes, and necessary source IP or device security information.

A network service technically transmits your data packets, but we do not use the content of user communications for advertising profiling, and we do not sell your browsing content solely for advertising purposes. Any processing necessary for security, troubleshooting or legal compliance is limited to what is proportionate to the specific purpose.

4. Cookies and similar technologies

The website mainly uses the cookies below — no advertising or cross-site tracking cookies — and usage statistics are received and processed by our own servers, supplemented by the third-party Microsoft Clarity to understand how public pages are viewed and clicked; no advertising platform is used:

• anbo_session (essential): keeps you signed in; valid for 7 days;
• NEXT_LOCALE (essential): remembers the interface language you selected;
• _an_consent (essential): remembers your choice about usage statistics; valid for 1 year;
• _an_vid (usage statistics): a randomly generated visitor ID that links multiple visits from the same browser so that we can compile aggregate statistics and understand which pages are useful; valid for 1 year; it contains neither your email address nor your name, and once you sign in it is linked to your account;
• _clck, _clsk (page usage analytics, third party): set by Microsoft Clarity to recognise visits from the same browser and page views within one visit; valid for 1 year and 1 day respectively; set only on public pages and only when usage statistics are allowed;
• Payment pages: the checkout page is provided by the payment provider and may set cookies used for fraud prevention, for which that provider is responsible.

You can view, delete or block cookies in your browser settings. Blocking essential cookies will prevent you from signing in or from saving your language choice; deleting _an_vid means that your next visit is treated as a new visitor. In the European Economic Area, the United Kingdom and Switzerland, the website sets _an_vid only after you agree; you can change your choice at any time via “Cookie settings” in the footer.

For the complete list of cookies and browser storage items, with their purposes and lifetimes, see the Cookie Policy.

5. How we use information

• Creating and maintaining accounts, verifying identity and providing sign-in functionality;
• Providing connection, IP selection, data metering, routing, TUN and configuration services;
• Fulfilling orders, provisioning resources, managing balances and providing customer support;
• Securing accounts, networks, users and the service, detecting abnormal use and fraud, and preventing free data from being claimed repeatedly;
• Analyzing failures and improving performance, compatibility and the product experience;
• Complying with legal obligations, resolving disputes and protecting legitimate rights.

We will not use your information for new purposes that are incompatible with those above. If that ever becomes necessary, we will tell you in advance and, where the law requires, obtain your consent.

6. Legal bases for processing

If you are located in the European Economic Area, the United Kingdom or another region that requires a legal basis to be stated, we process your personal information on the following bases:

• Performance of a contract: processing that is necessary to provide the services you registered for or purchased (accounts, connections, orders, support);
• Legitimate interests: securing the service, preventing fraud and abuse, troubleshooting and improving the product. We weigh these interests against your rights and freedoms;
• Compliance with legal obligations: for example tax and accounting, anti-fraud, and responding to lawful requests from competent authorities;
• Your consent: where the law requires consent, you may withdraw it at any time. Withdrawal does not affect processing carried out on the basis of consent before it was withdrawn.

7. Who we share information with

We do not sell your personal information. To provide and protect the service, we share information only as necessary with service providers (such as infrastructure, payment, support and operations providers), and require them to process it on our instructions and under contract. We may also disclose information when the law requires it, to protect users or public safety, to investigate fraud or to protect our legal rights, and we will take the safeguards required by law if the business is merged, reorganized or transferred.

Third-party clients and tools you choose to use are maintained by their own developers. Once you import a subscription or configuration into them, how they handle data is governed by their own rules.

8. How long we keep information

We keep information only for as long as needed to provide the service, perform our contract with you, resolve disputes, keep things secure and meet legal requirements, and then delete or anonymize it. The exact period depends on the type of information, the status of your account and what applicable law requires; after you close your account, we delete or anonymize your information within a reasonable period, except where the law requires us to keep it.

9. How we protect information

We protect information using access controls, transmission protection, secure credential storage, log restrictions and other reasonable measures. However, no internet or software system is absolutely secure, and you should also use a unique, strong password and keep your credentials safe.

If a security incident occurs that may affect your information, we will assess it and notify you and the relevant regulators as required by applicable law.

10. Cross-border processing

To provide the service, your information may be processed or stored outside the country or region where you live. We take the safeguards required by applicable law for such cross-border processing.

11. Your choices and rights

Depending on the law that applies where you live, you may have the following rights:

• Access: to know what information we process about you and to obtain a copy;
• Correction: to correct information that is inaccurate or incomplete;
• Deletion: to ask us to delete your information or close your account;
• Restriction or objection: in certain circumstances, to restrict or object to certain processing;
• Portability: to obtain the information you provided to us in a commonly used format;
• Withdrawal of consent: to withdraw consent at any time for processing that is based on consent.

How to exercise them: please email [email protected], stating your request and your account email. To protect account security, we may need to verify your identity first, and we will reply within the period set by applicable law. You will not be discriminated against or receive a lower quality of service for exercising these rights.

Certain transaction, security and compliance records may need to be retained as required by law; we will explain which parts we cannot delete and why. You may also stop using the service, uninstall the client or clear cookies in your browser at any time.

12. Regional supplements

European Economic Area and United Kingdom: in addition to the rights in the previous section, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first, and we will do our best to resolve the matter.

California, United States, and other applicable states: in the past 12 months, the categories of personal information we collected were identifiers (such as email address and device identifier), commercial information (orders and usage), internet or other network activity information (website visits and connection status), and the support materials you chose to provide, used for the purposes described above. We do not sell personal information, and we do not share it for cross-context behavioral advertising. You can submit requests to access, correct or delete your information as described in the previous section, and you may also have an authorized agent submit them on your behalf.

If other data protection laws apply where you live, we will handle your requests in accordance with them as well.

13. Minors

AnboVPN is not directed to minors who, under applicable law, may not consent independently to the relevant services. If you believe that a minor has provided information to us without proper authorization, please contact us, and we will verify it and delete the information promptly.

14. Policy updates

We may update this Privacy Policy to reflect changes in our products, the law or our operations, and we will update the effective date at the top of this page. Where reasonable, we will give notice of material changes through the website, the client or account notifications. By continuing to use the service after an update, you accept the updated policy; if you do not agree, please stop using the service and you may request closure of your account.

15. Company and contact information