Privacy Policy
This Privacy Policy explains how Kora VPN ("we", "us") handles your personal data when you use our website and VPN service (the "Service"). We aim to collect the minimum data needed to operate the Service and to protect your privacy.
1. Data we collect
- Order data: the product you purchased, the public identifier of your pass, and its status. We do not require an email address or a customer account.
- Card payments: processed entirely by our payment provider, Stripe. Card numbers and other payment details never touch our servers.
- Crypto payments: the transaction hash you submit so we can confirm your payment. We do not collect wallet seed phrases or private keys.
- Technical logs: server logs (IP address, timestamps, request paths) retained briefly for security and abuse prevention.
- Usage statistics: if you accept statistics cookies, anonymous analytics (page views, country, device type, and purchase events carrying the order reference and amount — never your email, wallet address, or pass link) are collected via Google Analytics 4. See section 3 below.
2. How the VPN part works
When your pass is active we assign you a VPN IP address and retain the connection metadata (assigned IP, start/expire time) for the duration of the pass. We do not log the content of your traffic, your browsing history, or your DNS queries. When a pass expires, the associated peer and its metadata are deleted automatically.
3. Cookies
We use two kinds of cookies, and we never sell data or use advertising trackers:
- Necessary cookies (always on): a session cookie for the admin area and a CSRF cookie that protects forms from cross-site request forgery. These are required for the site to function.
- Statistics cookies (optional): if you click "Accept all" in the cookie banner, Google Analytics 4 sets cookies to measure anonymous usage. If you choose "Necessary only", no statistics cookies are set and no analytics script is loaded.
You can change your choice at any time by clearing the
kv_consent entry from your browser's local storage, which
will show the banner again.
4. Data retention
- VPN passes and their metadata are deleted automatically when they expire or are revoked.
- Crypto transaction hashes are kept for as long as needed to resolve disputes and prevent fraud.
- Short-lived server logs are rotated on a regular schedule.
5. Your rights
Depending on your jurisdiction (e.g. the EU/EEA, UK, California), you may have the right to access, correct, or delete your personal data, or to object to its processing. To exercise these rights, contact us at the address below.
6. Sharing
We do not sell your personal data. We share data only with the service providers that help us operate (our payment processor and, only if you consent, our analytics provider), and where required by law.
7. Changes to this policy
We may update this policy from time to time. We will reflect the effective date above and continued use of the Service after a change constitutes acceptance of the revised policy.
8. Contact
Kora VPN
Via the contact form
Website: koravpn.com