Privacy Policy

Last updated: January 1, 2026

Totoro Cloud VPN's privacy policy reflects our core commitment: we collect no traffic logs, no IP addresses, and no browsing history. Your online activity is never recorded or shared with any third party.

1. What We Collect

We collect only the minimum information necessary to operate the service:

  • Email address (for account creation and support)
  • Payment transaction ID (not full card details — processed by our payment partner)
  • Subscription status and plan type
  • Aggregate, anonymized performance metrics (server load, region availability)

We do not collect IP addresses, DNS queries, traffic data, websites visited, or any content you transmit through the VPN.

2. How We Use Your Data

Your information is used solely to:

  • Deliver and maintain your VPN subscription
  • Process payments and issue receipts
  • Respond to support requests
  • Send service announcements (you may opt out at any time)

3. Data Sharing

We do not sell, rent, or trade your personal information. We share data with third parties only when required by law or with your explicit consent. We will notify you of any legal demand for your data to the extent permitted by law.

4. Data Retention

Account data is retained while your subscription is active and for 30 days after cancellation to allow for reactivation. You may request full deletion of your account data at any time by contacting support.

5. Security

All data is transmitted over TLS. Passwords are hashed using bcrypt. Payment details are processed exclusively by our PCI-compliant payment partner and never stored on our servers.

6. Contact

For privacy-related requests, contact: [email protected]