Privacy Policy

1. Who We Are

VaultLine VPN is operated by Mooncrate Studios Ltd, a company registered in the United Kingdom. When we refer to "VaultLine", "we", "us", or "our" in this policy, we mean Mooncrate Studios Ltd.

2. Our Core Commitment

VaultLine VPN is built on a strict no-activity-logs policy. We do not monitor, record, log, store, or share any of your online activity while connected to our VPN servers. This includes:

• •Browsing history or websites visited
• •DNS queries
• •Traffic content or data transfers
• •IP addresses assigned to you during VPN sessions
• •Connection timestamps (when you connect or disconnect)

3. Information We Collect

To provide and maintain the VaultLine VPN service, we collect the minimum data necessary:

3.1 Account Information

• •Email address — used for account creation, authentication, and essential service communications
• •Password — stored in a securely hashed format (bcrypt); we never store or have access to your plain-text password

3.2 Subscription Information

• •Payment data — processed securely by our payment providers. Web purchases are handled by Stripe; purchases made through our iOS app are handled by Apple In-App Purchase. We do not store credit card numbers, CVV codes, or bank account details on our servers. For web subscriptions we retain only your Stripe customer reference to manage your subscription; for App Store subscriptions, billing is managed entirely by Apple.
• •Subscription status — your current plan type and expiry date, used solely to manage your access to the service

3.3 Connection Data

• •Active session status — we track whether you currently have an active VPN connection to enforce device limits and provide the connection management features in your dashboard. This data is deleted when your session ends.
• •Server selection — which server you are connected to, for load balancing and service quality purposes

4. How We Use Your Information

We use the collected information solely for the following purposes:

• •To create and manage your VaultLine account
• •To authenticate you when you sign in
• •To process and manage your subscription payments via Stripe (web) or Apple In-App Purchase (iOS)
• •To enforce device connection limits as per your plan
• •To send essential service communications (e.g., subscription confirmations, security alerts)
• •To provide customer support when you contact us

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties, and we never share any of your online activity data — because we do not log it in the first place. We share the limited data we do hold only in the following circumstances:

• •Stripe — for secure payment processing of web subscriptions, receiving only what is required to complete the transaction (subject to Stripe's Privacy Policy)
• •Apple — for secure payment processing of subscriptions purchased through our iOS app via Apple In-App Purchase, receiving only what is required to complete the transaction (subject to Apple's Privacy Policy)
• •Legal requirements — if required by law, court order, or governmental authority. However, as we do not log your activity, we have no browsing data to share even if requested.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• •WireGuard and OpenVPN encryption protocols for all VPN connections
• •AES-256-GCM cipher for data encryption
• •bcrypt password hashing
• •HTTPS/TLS for all web communications
• •DNS leak protection and kill switch features

7. Your Rights

Under applicable data protection laws (including GDPR and UK Data Protection Act 2018), you have the right to:

• •Access the personal data we hold about you
• •Request correction of inaccurate data
• •Request deletion of your account and associated data
• •Object to or restrict certain data processing
• •Request data portability

To exercise any of these rights, please contact us at [email protected].

8. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove all your personal data from our systems within 30 days, except where we are required by law to retain certain records.

9. Children's Privacy

VaultLine VPN is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: