Privacy Policy

Last updated: 2026-05-09 · Applies to vps.vpluse.gg and the VPluse VPN Telegram bot · 🇷🇺 Русский

  TL;DR: We collect the bare minimum needed to run the VPN service.
  We don't keep browsing history, don't sell data to third parties, and don't hand data to authorities without lawful order.

1. What data we collect

When you sign up at vps.vpluse.gg

Email — to log in to your account and recover access.
Password hash (Argon2id) — your raw password is never stored and never leaves your browser in plain text.
IP address — recorded server-side for abuse protection (rate limit, anti-spam). Kept in nginx logs for 7 days.

When you use the @nikooddsbot Telegram bot

Telegram ID, username, name — what Telegram passes to the bot automatically.
VPN profile identifier (xui_client_id) — to manage your subscription.
Referral relationships — who invited whom, for awarding bonuses.

What we do NOT collect or store

❌ Your connection history or visited sites — the VPN runs no-logs.
❌ Contents of your traffic — VLESS+Reality uses end-to-end encryption.
❌ Bank card data — payments go through Telegram Stars or CryptoBot; we don't see cards.
❌ Biometrics, geolocation, contacts — the VPN doesn't ask for them.

2. How we use the data

Creating and managing your VPN profile (issuing keys, renewing subscriptions).
Subscription status notifications (trial ending, payment received).
Service abuse protection (rate limit, anti-fraud).
Referral bonus calculation.

3. Where the data lives

VPN servers are distributed across 7 countries: 🇷🇺 Russia (Moscow), 🇸🇰 Slovakia, 🇪🇪 Estonia, 🇰🇿 Kazakhstan, 🇭🇰 Hong Kong, 🇹🇷 Turkey, 🇹🇭 Thailand. The management server (bot, billing, sessions) is in 🇩🇪 Germany (Frankfurt) — EU jurisdiction, GDPR. Database — SQLite on the application server (Germany only).

4. Third-party sharing

We don't sell, rent, or share your data with third parties for marketing or any other purposes. Exceptions:

Payment systems (Telegram, CryptoBot) — receive only the amount, currency and payload ID.
Cloudflare — for DNS resolution (no proxying).
Google reCAPTCHA — only for the human-check on the signup form.

5. Your rights

Delete your account — message @nikooddsbot, we'll erase all your data within 24 hours.
Get a copy of your data — on request we export everything we have on you.
Unlink Telegram — bot Settings → 🔗 Unlink web account.
Cancel auto-renewal — any time in the bot → 💳 Subscription → ❌ Cancel.

6. Cookies

The site uses only a session cookie (session_token) for logging into your account, plus a lang cookie remembering your language choice. Cookies are protected with Secure, HttpOnly, SameSite=Lax flags. No third-party cookies (no ad or analytics trackers).

7. Policy changes

We may update this policy. Material changes will be announced to all users via the Telegram bot.

8. Contacts

Privacy questions — message us via the Telegram bot: @nikooddsbot.