Privacy Policy

We were founded on a simple principle: a VPN service should never collect information that can identify, track, or profile its users.

Although LunoVPN is incorporated in the State of California, we are not subject to any mandatory data-retention requirements, and our systems are engineered to be technically incapable of storing logs.

This Privacy Policy explains what we do not collect, what minimal data we may process, and how our infrastructure is intentionally designed to protect your privacy.

LunoVPN operates under a strict zero-log philosophy. We do not collect, store, or monitor any of the following:

Our systems are intentionally configured in a way that makes collecting such information technically impossible.

To operate the service, we process only the absolute minimum required information.

When a user activates LunoVPN, they are assigned a randomly generated 16-character alphanumeric code. This code:

• Is not tied to any name, email, phone, or identity.
• Only determines active subscription status.
• Cannot be linked to network activity.

Payments are processed by third-party payment providers. We receive only generic payment confirmation data, such as transaction success/failure and a transaction ID (not tied to VPN usage). We do not store billing names, card numbers, addresses, or emails used during payment. Payment records and VPN activity are never linkable to each other.

If a user contacts us voluntarily, we may process the information they choose to share. All support messages are:

• Stored separately from all network systems.
• Accessible only to authorized support personnel.
• Automatically deleted within 30 days unless legally required to retain longer.

LunoVPN is designed with a strict data-minimization principle. We collect and process only the information that is strictly necessary to operate and maintain the service. This includes subscription status, the anonymous account identifier, and limited operational diagnostics required for service performance and reliability.

We do not collect, store, or process browsing activity, IP addresses, DNS queries, connection timestamps, or traffic metadata. This ensures no personally identifiable information or user activity can be linked to any individual user.

LunoVPN never asks for and does not require:

• Name
• Email address
• Phone number
• Physical address
• Identification documents

You may use our entire service without ever revealing any personal information.

All LunoVPN servers are built with a privacy-first architecture:

Even if a server is physically seized, no logs or data can be recovered.

LunoVPN Inc. is a U.S. company located in California, and complies with applicable U.S. laws. However:

• We do not collect logs.
• We cannot retroactively generate logs.
• We are technically unable to provide information we do not possess.

In the event of a valid legal request, we can only confirm:

“LunoVPN does not store or possess any logs or user activity data.”

We will always notify users of any requests when legally permitted.

LunoVPN does not use any third-party credit card processors and does not accept direct card payments of any kind. We support only the following payment methods:

• Apple App Store (iOS)
• Google Play Store (Android)
• Bitcoin (direct wallet payments)

Because all payments are handled entirely by Apple, Google, or the Bitcoin network:

• LunoVPN does not receive, access, or store any personal or billing information.
• We do not receive names, email addresses, phone numbers, billing addresses, or payment card details.
• We do not have access to Apple ID or Google account information.
• From Apple and Google, we receive only a “payment successful” confirmation signal.
• For Bitcoin payments, we receive only a non-identifying transaction hash, which cannot be linked to identity or VPN usage.

Payment information is processed externally and never tied to your Anonymous User ID, subscription behavior, or any network activity.

To build long-term trust, LunoVPN commits to:

• Clear, public no-log statements.
• Independent third-party audits of our infrastructure (planned).
• Public transparency reports if we receive actionable legal demands.

Although we do not collect personal data, users maintain the right to:

• Request deletion of any support messages.
• Request clarification on our privacy practices.
• Ask how their Anonymous User ID is processed.

We respond to all privacy inquiries within a reasonable timeframe.

For inquiries regarding this Privacy Policy or our data handling practices: