Last updated: 28 October 2026
This policy explains what PeachVPN collects when you use our apps, our VPN servers, this website and our account site account.peachvpn.net: why we collect it, who else receives it and how long we keep it. “PeachVPN”, “we” and “us” mean the team that runs the PeachVPN service. Questions: support@peachvpn.net.
Work in progress (28 October 2026). Some older servers still log DNS lookups, and some of our server logs and monitoring still keep connection records: account name, IP address and connection times. Our API access logs are still kept for 14 days instead of 7. We are switching these off and deleting the records. We expect to finish by 31 October 2026, and we will remove this note when we do. Until then, the parts of this policy about DNS lookups, IP addresses and connection history are not yet true on every server.
In short
- We do not log your browsing history, traffic destination, data content or DNS queries.
- Our VPN servers do not store the IP address you connect from, and we keep no history of your VPN connections.
- We keep what we need to run your account: your email address or username, your plan, your devices and your payments. Some account and payment records include an IP address, for security and billing, and our API keeps access logs for 7 days (sections 3 and 8).
- We do not sell your personal data.
- Free accounts in our Android and iOS apps see ads from Google. Paid accounts see no ads.
1. What we never record on the VPN
When you are connected, your traffic passes through our servers. We do not record:
- the websites and apps you use, or where your traffic goes;
- the content of your traffic;
- your DNS lookups (the names of the sites your device looks up).
2. What happens when you connect
- A VPN server checks your username and password with our login server.
- Our monitoring sees the IP address you connect from for a moment, only to work out your country, for server load and planning. The IP address is not stored.
- While you are connected, we keep a live record of the session: your username, the server, when the session started, the private VPN address it gave you and how much data it used. We use it to show your devices, apply the device limit and keep servers healthy. The record is deleted when you disconnect.
- We keep totals that do not identify anyone, such as users per server and per country, and bandwidth per server.
3. Your account
In the apps
- If you sign up in an app, we store your email address, your password and a country code that the app sends.
- If you bought your account from our shop or a reseller, you get a username and password. We don’t need your email address for that account.
- We store your plan, its expiry date and the account status.
- Devices: when you log in, the app sends a device ID that the system creates for our app. The Windows app also sends the device brand, model, operating system and app version. We use this to apply the device limit and to show you your devices.
- Account events: we log sign-ups, purchases, renewals, plan changes and account deletions, with the time and the IP address of the request. We use this for billing, refunds and fraud checks.
- We send account emails, such as verification codes and password resets, through ZeptoMail.
On account.peachvpn.net
- Your name and email address. If you choose, also your phone number, address, company, tax ID and Telegram ID (for invoices and notifications).
- For security, we log sign-ins, failed sign-ins and changes to your profile, with the IP address and a short description of your device.
- For each order, we store the IP address and browser. We use them to limit free trials and stop fraud.
- Your support tickets and the emails we send you.
4. Payments
- App Store and Google Play: Apple or Google handles the payment. We receive a receipt or purchase token to activate your plan. We never see your card or bank details.
- account.peachvpn.net: you can pay by card through Stripe, through PayPal, with crypto through our own BTCPay Server, or by bank transfer.
- Card payments happen on Stripe’s page, so Stripe receives your card details and what you enter there. If you save a card, we also send Stripe your name and email address. We never see or store card numbers.
- PayPal receives the order number, description and amount from us.
- We keep invoices, payment records and the payment provider’s confirmation.
5. Support
- When you email support@peachvpn.net or use the form on this website, we receive your email address, your message and any file you attach. Our support inbox is Zoho Mail (EU data centre).
- The website form is checked by Cloudflare Turnstile (against spam) and sent to our inbox through ZeptoMail. The website itself does not store it.
- Speed test (TV app): if you press “Send Report”, we receive the test results, the server and protocol, the public IP address the test ran from (while connected, the VPN server’s address), your device model, its system version, the app version, and the country and network the report came from. The report does not include your username.
6. This website
- peachvpn.net sets no cookies when you visit. Cloudflare may set a security cookie if it has to check that you are not a bot.
- If you choose a language, we remember it in a cookie (
peach-lang, 1 year). - Your light or dark choice is saved only in your browser.
- We use no analytics, advertising or tracking scripts.
- Cloudflare hosts and protects the site. It processes your IP address and request to deliver the pages and block attacks.
- account.peachvpn.net uses cookies to keep you signed in, to protect forms and to remember your display settings. It uses no analytics.
7. Ads and other services in the apps
- Google AdMob: free accounts in the Android and iOS apps see ads (on iOS, expired accounts too). The Google Mobile Ads software is part of these apps. It can collect your device’s advertising ID, IP address and information about the ads shown, also on paid accounts, even though paid accounts are shown no ads. Ads may be personalized. On iOS, Google receives the advertising ID only if you allow tracking when the app asks. On Android you can reset or delete the advertising ID in the system settings. Google’s privacy policy: policies.google.com/privacy
- Our Android TV, Fire TV, Windows and Mac apps have no third-party ads. The Windows app can show our own banner.
- IP address check: to show your current IP address, the apps ask checkip.amazonaws.com (Android, Android TV, iOS) or api.ipify.org (Windows). These services see your IP address.
- Apart from AdMob, the apps contain no analytics or tracking tools.
8. Logs on our API
The apps talk to our API at api.pclient.net. Amazon CloudFront delivers these requests, and our API server and CloudFront keep standard access logs: IP address, time, the address requested and the type of app or browser. We use them to fix errors and stop attacks, and we delete them after 7 days.
9. Who receives data
Every company that receives data from us is named in the sections above, with what it receives. Our servers run in data centres that we rent from hosting companies.
We share data with authorities only when the law requires it. We can only share what we have, as described in this policy.
10. How long we keep data
- Browsing history, traffic, DNS lookups: never recorded.
- The IP address you connect to the VPN from: not stored.
- Live session record: until you disconnect.
- Usage totals that don’t identify anyone: kept.
- App account: as long as it exists. Device records can stay after you delete your account, until you ask us to delete them.
- Account events with IP addresses, payment records and invoices: as long as tax and accounting law requires.
- account.peachvpn.net sign-in and security records: while your account exists, and afterwards as long as we need them for fraud checks, disputes and abuse.
- Emails we send from account.peachvpn.net: the content 90 days, the record that we sent it 1 year.
- Support emails and tickets: as long as we need them to help you, and while your account exists.
- API access logs: 7 days.
- Speed test reports: kept for server analysis. They are not linked to your account.
- Backups: deleted data can stay in our database backups for a limited time, until the backups are replaced.
11. Legal basis (GDPR)
- Contract: to run your account, the VPN, payments and support.
- Legal obligation: invoices and tax records.
- Legitimate interests: security, fraud and abuse checks, access logs, server monitoring, and ads that pay for the free plan.
- Consent: tracking on iOS (you choose when the app asks) and marketing emails (only if you agree; you can unsubscribe at any time).
12. Your rights
You can ask us to show, correct, export or delete your data, and you can object to how we use it or ask us to limit it. Where we rely on your consent, you can withdraw it at any time. You can also complain to a data protection authority.
- Delete your account: in the iOS, Mac and Windows apps, on account.peachvpn.net (Settings, once no service is active), or by email. Deleting in the app removes your account and VPN login at once. To have your device records and support emails deleted too, write to us.
- How to ask: email support@peachvpn.net from your account’s email address, or include your username. We answer within 30 days.
- Some records, such as invoices, must be kept for as long as tax law requires.
13. Where your data is processed
Our VPN servers are in the countries on our Servers page. Our account and API systems are in Germany and the Netherlands. Some of the services above (such as Cloudflare, Amazon, Google, Apple, Stripe and PayPal) may process data in other countries, including the United States.
14. Security
We use encrypted connections for our apps, website and API, and we limit access to user data to the people who run the service. No system is completely secure.
15. Age
PeachVPN is for adults aged 18 and above. If you believe a child has given us personal data, please tell us and we will delete it.
16. Changes
We may update this policy. The date at the top shows the last change. If a change affects how we use your data, we will point it out on this page.