Privacy Policy
Last updated: November 2026
This policy applies to data processing related to the MHZVPN marketing website, user panel and subscription services. Account delivery, traffic billing and website analytics serve different purposes. The sections below describe the data involved, retention practices and actions available to users.
Account and Order Data
No email address is required to create an account; a username and password are sufficient. The username identifies the account, and the password verifies identity and should be stored as an irreversible hash. Email is not required for registration. If a user voluntarily provides an email address in a support ticket, it is used only to handle that request and is not an additional data collection requirement.
To provide subscriptions and handle after-sales support, this service stores plan selections, order amounts, payment status, transaction identifiers, subscription status and summarized data usage. Ticket content is used to investigate issues and respond to requests. When submitting materials, please obscure passwords, unrelated payment details and full subscription links.
No-Logs Policy and Connection Records
MHZVPN does not record which websites users access through international routes, or store browsing history, destination domains, destination IP addresses or communication content. It does not create records that can be used to reconstruct user browsing activity. This no-logs policy covers activity on subscription routes; it does not mean that account, order or billing information is not retained.
Temporary session states required for connections are used only to maintain a connection and are released when the session ends. Individual connection logs and timelines that could link activity to a user are not stored persistently. Traffic billing uses summarized usage data and does not include destinations. Materials voluntarily submitted by users to report issues are handled as support ticket data and are not added to long-term browsing records.
Site Analytics and Local Storage
The marketing website may collect analytics such as pages visited, referring pages, browser and device types, and button clicks to understand content usage and troubleshoot website issues. These are website interaction data; they do not represent activity on other services accessed through subscription routes and should not include passwords, authentication credentials or full subscription addresses.
Cookies and local storage are used to maintain login status, save interface preferences and support site analytics. Users can restrict cookies, clear site data in their browser settings, or log out on shared devices. Clearing authentication data requires logging in again; clearing browser data does not automatically delete a server-side account or order.
Payment Processing and Data Sharing
Payments are supported through Alipay / WeChat Pay / USDT. Payment authorization and transaction processing are handled by the relevant third-party payment services, which process necessary transaction data under their own rules. MHZVPN uses order numbers, transaction identifiers and payment results to confirm receipt, provide subscriptions and verify refunds. Users are not asked to provide third-party payment account passwords.
Data is used and shared only as necessary to provide services, handle after-sales support, reconcile payments or meet applicable legal obligations. Before paying, users can review the privacy notice on the relevant payment page. Service rules are available in the Terms of Service; the refund policy provides a 60-day no-questions-asked refund.
Retention Periods and Deletion Requests
Account data is retained while account services are provided. Order and transaction records are retained as needed for reconciliation, refunds, dispute handling and applicable legal requirements. Support tickets and site analytics are retained only for as long as needed to handle requests, troubleshoot issues and conduct analysis. Once a purpose is fulfilled, data is deleted or aggregated so it can no longer be linked to an individual; one fixed retention period does not apply to all data.
Users can log in to the panel and submit a request to access, correct or delete account data through the support ticket portal. Account control must be verified before processing. Deletion may affect login, subscription delivery and support inquiries. Records that must be retained by law or relate to an unresolved dispute will have their use restricted and will be addressed once the reason for retention no longer applies.
Policy Updates and Privacy Requests
Updates to this policy will be published on this page, and the last-updated month at the top will be revised. Important changes to data use or user rights will be announced on the website or in the user panel. Where separate consent is required, publishing an updated text alone does not replace the applicable process.
For questions about this policy, data use or deletion, users can submit a support ticket through the user panel or visit the Contact Us page for support options. Please describe the data involved and the request, and avoid sharing account credentials on public pages.