Privacy Policy
Last updated June 2026
xruby VPN is built so that we know as little about you as possible. You don't give us an email, a name, or a password to use the service, and we don't keep logs of what you do while connected. This policy explains the little we do hold, and why.
What your account is
An account is a random 16-digit number — that number is your only login. We never ask for, and never store, your name, email, or a password. On our servers we keep only a one-way cryptographic hash of your account number, so we can recognize a valid number without being able to reproduce it.
What we collect
To run the service and bill for it, we keep the minimum necessary:
- Account: a hash of your account number and your remaining account-time balance.
- Devices: the WireGuard public key of each device you register, an internal tunnel IP we assign it, an optional device label you choose, and a coarse “last seen” to help you manage your devices. Your private keys are generated on your device and never leave it.
- Payments: minimal records needed for accounting — the method, amount, and how much time it added. Card payments are processed by our payment provider; we do not receive or store your card number. Monero and voucher payments are not linked to your identity.
- Optional email: only if you choose to add one, used for receipts, renewal reminders, and optional recovery. You can remove it at any time.
What we do not collect
We do not log your browsing history, DNS queries, the contents or metadata of your traffic, your per-session source IP tied to your account, or a record connecting your account to the sites you visit. See our No-log policy for the details.
The website
The website uses only the storage strictly needed to keep you signed in to your account (a session token) and to remember your language. We do not use third-party advertising or cross-site tracking cookies.
Sharing and disclosure
We do not sell, rent, or trade personal data. We disclose information only where we are legally compelled to — and because we deliberately hold so little, there is very little we are able to disclose. We will never have logs of your activity to hand over, because we do not keep them.
How long we keep data
Account and device data is kept while your account is active. Payment records are kept for as long as we are required to for accounting and tax purposes. When you delete your account, your account and device records are removed; minimal payment records may be retained only as the law requires.
Your choices
At any time you can reveal and copy your account number, add, change, or remove an optional email, register and remove devices, and delete your account entirely from the account area.
Changes to this policy
If we make material changes to this policy, we will update the date above and, where appropriate, notify accounts that have added an email.
Contact
Questions about privacy? Email privacy@xruby-vpn.com.