Privacy Policy and Acceptable Use Policy
Effective Date: 27 January 2026 (publication date)
At PrimeVPN, we prioritize the privacy and security of your data. We strive to minimize the collection of personal data and to be transparent about what data we collect and why. This Privacy Policy describes how we collect, use, and protect your information and complies with applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. What We Offer and How It Works
PrimeVPN provides ready-to-use VPN services available through the PrimeVPN application.
1.1 PrimeVPN
When purchasing a subscription via https://pay.primevpn.io, we collect only the user's email address.
The user's IP address may be transmitted to the payment gateway by https://pay.primevpn.io if required, but it is not stored.
After connecting to the VPN via the application, we collect:
application and operating system version (for internal analytics);
device ID (to bind keys to a device).
User IP addresses are not collected or stored.
An exception applies to temporary logging in cases of violations that harm the service, use of servers for spam distribution, DDoS attacks, or traffic abuse.
1.5 Website (https://primevpn.io)
On https://primevpn.io we use:
language cookies;
anonymized statistical data (visits, traffic sources, downloads, regions, and user devices).
Data is collected via Google Analytics and Cloudflare Insights.
The data is anonymized and does not allow identification of the user.
2. What Data We Collect and Why
2.1 Data Provided by the User
2.2 Data Collected Automatically
device ID and operating system - for key functionality and internal statistics;
application version - for compatibility and improvements;
IP address - processed temporarily:
to analyze blocking;
to prevent violations (in cases of abuse and to protect PrimeVPN infrastructure and services);
data for analytics and marketing attribution, such as device identifiers (IDFA/GAID), technical device data, and app usage events (e.g., install, launch, subscription purchase), collected using third-party SDKs (Facebook SDK, Singular) to analyze marketing effectiveness and improve the product.
2.3 Data We Do Not Collect
We do not collect or store information about VPN activity (traffic, websites visited, etc.).
We do not receive data from third-party logins (Google, etc.), as we do not use such authentication methods.
3. How We Use Data
We use data solely for:
providing access to services;
maintaining and improving service stability;
communicating with users upon their request;
processing payments and payouts;
preventing abuse and attacks;
analyzing anonymized statistics to improve the product;
analyzing the effectiveness of advertising campaigns and user acquisition sources (marketing attribution);
sending offers and product news (you can unsubscribe at any time by clicking the link in the email or contacting us).
VPN traffic and activity are not used for analytics or advertising.
4. Data Sharing with Third Parties
We do not share your personal data with third parties except in the following cases:
Data provided via https://pay.primevpn.io may be transferred to payment gateways for payment processing (see the privacy policy of the relevant payment gateway).
We may share anonymized and aggregated data with analytics and marketing attribution providers such as:
Firebase, Crashlytics;
Meta Platforms (Facebook SDK) and Singular,
solely for:
No other data is shared with third parties.
5. Cookies and Analytics
We use cookies only for proper website functionality:
language preferences (cookies);
anonymized analytics via Google Analytics and Cloudflare Insights.
PrimeVPN mobile applications may use third-party SDKs (including Facebook SDK and Singular) that apply similar tracking technologies for analytics and marketing attribution purposes.
Only aggregated statistical data is collected.
We do not track users' personal activities.
You can disable cookies in your browser settings - this will not affect access to functionality.
6. Security
We apply modern technical, organizational, and physical safeguards to prevent unauthorized access, alteration, or loss of data.
7. International Data Transfers
In some cases, data may be transferred outside the EEA.
In such cases, we:
use Standard Contractual Clauses (SCCs) approved by the European Commission;
apply data minimization, encryption, and anonymization.
You may contact us for further details.
8. Data Retention
We retain data only for as long as necessary to provide services or as required by law.
After that, data is deleted or anonymized.
9. Your Rights
You have the right to:
access your data;
correct or delete your data;
withdraw consent;
restrict or object to processing;
lodge a complaint with a supervisory authority.
To exercise your rights, please email legal@primevpn.io.
10. Children
Our services are not intended for persons under the age of 16.
If we become aware that a child has provided us with data, we will delete it immediately.
Parents or guardians may contact us directly.
11. Limitation of Liability
Our services are provided "as is" and "as available."
We make no express or implied warranties regarding uninterrupted operation, speed, security, or suitability of the services for specific expectations.
PrimeVPN shall not be liable for:
any indirect or consequential damages, including loss of profits or data;
service disruptions caused by external factors, technical limitations, or actions of third parties;
consequences of using the service for purposes that violate the law.
To the extent permitted by law, our liability is limited to the minimum required by applicable law.
Nothing in this Policy excludes or limits liability where such exclusion or limitation is prohibited by law (e.g., in cases of intent or gross negligence).
11.1 Acceptable Use
The user agrees to use the VPN service exclusively for lawful purposes and not to use it for:
illegal activities (hacking, distribution of malware, fraud, etc.);
sending spam, phishing, or deceptive messages;
distributing, storing, or transmitting prohibited content (including content that infringes copyright);
attacks on third-party networks or services (e.g., DDoS);
actions that harm other users, infrastructure, or partners.
We do not log activity, monitor, or record user traffic.
However, upon receiving credible notices of violations (e.g., abuse reports from hosting providers, ISPs, or rights holders), we may take necessary measures to protect our infrastructure and comply with legal requirements.
11.2 Content and Third-Party Resources
PrimeVPN is not responsible for materials posted or transmitted by users or third parties through our services.
We do not continuously monitor or control such content but may take action if required or permitted by law.
PrimeVPN is also not responsible for the content of third-party websites linked from our resources; such links are provided solely for user convenience.
12. Updates
This Policy may be updated from time to time.
All changes will be published on this page with a new effective date.
13. Contacts
If you have any questions about this Privacy Policy, please email legal@primevpn.io.
