Privacy Policy
 
 

Last updated Sep 01, 2026

Corstack and CorVPN is committed to protecting your privacy. Our guiding principle toward data collection is not to collect any VPN activity data that can be associated with our users. We do not collect logs of your VPN activity, including no logging of VPN browsing history, VPN traffic destination, data content transmitted through our servers, or DNS queries. We also never store connection logs, i.e., no logs of your IP address, your outgoing VPN IP address, connection timestamp, or session duration. We designed our systems not to hold sensitive data about you; even when required by law, we cannot provide data that we do not have.

This Privacy Policy describes how Corstack LLC and its affiliates ("CorVPN" "we," "our" or "us") collect, use, and share information in connection with your use of our services and applications. This Privacy Policy (the "Privacy Policy") does not apply to information you may process when using our Services.

1. (USER-CONTROLLED OPTION): PERSONAL INFORMATION

Our VPN APP is a non-obligatory log network. CorVPN does not access personal information of users, including but not limited to names (subscriber names, user names and screen names), addresses ( mailing addresses, residential address, business addresses) and phone numbers, unless you provide such data depending on the context of your interactions with us, the choices you make, including your privacy settings, the products and features you use, for the purpose of managing your subscription and enjoying our VPN services. Except for the limited exceptions, we don't automatically collect any personal information from you.

When you open the APP seeking for our VPN services, the APP assigns a unique identifier to you for the service (this unique identifier is only linked to your device identification code, but does not tie to any personal information of users). When you use the VPN services, we will check your account information through this unique identifier to determine the level of service you have signed up for before establishing your VPN connection.

We do not know any means or source of user's detailed payment for VPN services (including any credit card or bank account number) or any billing records either.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide. We may also receive a confirmation when you open an email from us.

CorVPN uses your email address (if any depending on your choice) for the following reasons:

  • To communicate with you about your VPN services or respond to your communications.
  • To send you updates and announcements.
  • To send marketing information, such as CorVPN offers, surveys, invitations, and content about other matters in connection with CorVPN ("Marketing emails"). You may choose to not receive Marketing emails by following the opt-out procedure described in these emails.
  • CorVPN uses your personal information only for the purposes listed in this Privacy Policy, and we don't sell your personal information to third parties without your prior consent.

2. SERVICE INFORMATION RELATED TO PREMIUM USAGE (Ad-Free & Strict No-Logs)

Subject to applicable laws and to avoid infringing any internet service provider, any browsing information, traffic destination, data content, IP addresses, DNS queries or other similar information relating to your online activities transmitted by you to our servers is not logged. That said, we don't collect any information regarding the websites you visit or any data stored on or transmitted from your device, including any data that applications on your device may transmit through the VPN network. Specifically, CorVPN does NOT have the following documents/information in situations involving limited connection with your personal information and non-collection of the websites you visit or any data stored on or transmitted from your device:

  • We do not know which user ever accessed a particular website or service.
  • We do not know which user was connected to the VPN at a specific time.
  • We do not know the set of original IP addresses of a user's computer or the temporarily assigned network addresses.

If anyone would like to access to or try to compel CorVPN to release user information based on any of the above, we cannot supply this information because the data don't exist.

2.1. Automatically collected information

For the purpose to fulfill our contractual obligations in good faith and to provide you enjoy excellent VPN services, we collect the following information related to your VPN usage:

Bandwidth Usage: We collect information regarding the total sum of data transferred by a given user. It is one of our service principles to provide unlimited data transfer, however if we notice that a user occupies more traffic than thousands of others combined, which affects other users' ability to enjoy high-quality service, we may inquire about the reason with the user.

Diagnostics and Server Loads: Anonymous data for diagnostics, study and analysis

2.2. Information collected with users' consent

  • Speed test data.
  • Crash reports, also without any personally identifiable information.
    On iOS, Apple's crash reporting can be turned off in iOS settings.

2.3. How we use information

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our services;
  • Improve and expand our services;
  • Understand and analyze how you use our services;
  • Develop new products, services, features, and functionality;
  • Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes;
  • Send you push notifications;
  • Find and prevent fraud;

2.4. With whom do we disclose your personal information

We don't keep or share any personalized data with any third parties.

2.5. Conclusion

We collect minimal usage statistics to maintain our quality of service. Although we provide service to users improving the network speed, we can't uniquely identify any specific behavior of any user, because thousands of users share one same location simultaneously to enjoy surfing the internet and the usage pattern overlaps with thousands of other customers who also connected to the same location on the same day.

Regarding sensitive data, we've designed our systems to completely prevent the storage of sensitive data. We never know how they have used our service.

We stand by our firm commitment to our customers' privacy by not possessing any data related to a user's online activities.

3. SERVICE INFORMATION RELATED TO FREE VPN USAGE

Free versions of our VPN products are supported by personalized ads, but these ads are not personalized based on any of your VPN browsing activity, nor do we share any such activity with our advertising partners. Personalization is conducted by our advertising partners, who collect personal data such as your user-resettable advertising identifier (e.g. AAID or IDFA) and combine it with the information they have to show you ads that they believe are more relevant to you. Google allows you to disable your advertising identifier via Google account settings. You can disable the Apple advertising identifier via Apple device settings.

3.1. Automatically collected information

Bandwidth Usage: We collect information regarding the total sum of data transferred by a given user. It is one of our service principles to provide unlimited data transfer, however if we notice that a user occupies more traffic than thousands of others combined, which affects other users' ability to enjoy high-quality service, we may inquire about the reason with the user.

Diagnostics and Server Loads: Anonymous data for diagnostics, study and analysis

Advertising identifiers: While using our free VPN Services our ad networks may collect your device identifier for marketing and analytics purposes. Google allows you to disable your advertising identifier via Google account settings. You can disable the Apple advertising identifier via Apple device settings.

Tracking Technologies & Cookies:

We use various technologies in our services to help us collect information which may include tracking links and pixel tags/page tags/web beacons. These are small, hidden images and blocks of code placed in web pages, ads, and our emails that allow us to determine if you perform a specific action. When you access a page, ad, or email, or click a link, these items let us know that you have accessed that page, opened an email, or clicked a link. For convenience, we refer to these as “tracking technologies,” although they are not always used to track individuals and the information collected is in a non-identifiable form that does not reference any personal data.

SDKs or software development kits are software code provided by our advertising network or other business partners that let our software interact with the services those partners provide. For example, in certain of our mobile apps, we may use an SDK to enable our app to serve ads from an advertising network. Sometimes these interactions will involve that business partner collecting, using, and tracking some information from the device on which the software is run.

Our advertising networks and their partners may use cookies and similar technologies to provide and personalize our Services and provide targeted advertisements. Some of these technologies can synchronize behavior across different mobile apps, devices, and websites so that advertisements can be tailored to your interests. This process is called personalized advertisement experience.

See below regarding the type of information that is collected and used for advertising purposes.

  • A Device ID, such as the device's advertising identifier or other app- or developer-bounded device identifiers, which may be used for the purpose of third-party advertising and analytics.
  • IP address, which may be used to estimate the general location of a device. However, when using the VPN service, this may replace your actual location with an alternative geographic location.
  • Non-user related crash logs, which may be used to diagnose problems and improve the SDK. Diagnostic information may also be used for advertising and analytics purposes.
  • User-associated performance data such as app launch time, hang rate, or energy usage, which may be used to evaluate user behavior, understand the effectiveness of existing product features, and plan new features. Performance data may also be used for displaying ads, including sharing with other entities that display ads.
  • Advertising data, such as advertisements the user has seen, may be used to power analytics and advertising features.
  • Other user product interactions like app launch taps, and interaction information, like video views, may be used to improve advertising performance.

3.2. Information collected with users' consent

  • Speed test data.
  • Crash reports, also without any personally identifiable information.
    On iOS, Apple's crash reporting can be turned off in iOS settings.

3.3. How we use information

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our services;
  • Improve and expand our services;
  • Understand and analyze how you use our services;
  • Develop new products, services, features, and functionality;
  • Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes;
  • Send you push notifications;
  • Find and prevent fraud;
  • To Serve Ads
  • For Marketing

3.4. With whom do we disclose your personal information

Advertising services we use to provide ads with our free VPN products may include:

Vendor Privacy Policy
Google Admob / Google Analytics https://policies.google.com/technologies/partner-sites
Unity Ads https://unity.com/legal/privacy-policy
Meta/Facebook https://www.facebook.com/privacy/policy/

4. JURISDICTION AND APPLICABLE LAW

Keeping your information private is our core mission. In service of this mission, the data collected by CorVPN is not connected to any individual.

Required by any law enforcement agencies, CorVPN turns over protected usage information only upon receipt of a valid subpoena, court order, or search warrant.

5. DATA RETENTION

We retain anonymize information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process your non-personal information, we delete it.

We keep records of any correspondence, questions, complaints, or compliments you submit to us, along with our response. Depending on how you contact us, we may collect your email address and any additional information you provide to us. Having full correspondence records enables us to provide the best possible customer support experience.

We use emails for support correspondence: customer-care@corstack.com

When you correspond with us using these emails, your correspondence records, including your name and email address, are stored in their systems.

6. SECURITY MEASURES

CorVPN is committed to protecting your information. We use best-in-class physical, procedural, and technical security in our offices and information storage facilities so as to prevent any loss, misuse, unauthorized access, disclosure, or modification of information. Access to user information is restricted to staff who need such access to perform their job duties.

While we believe these systems are robust, it is important to understand that no data security measures in the world can offer 100% protection.

Servers are housed in data centers with strong security practices. None of these data centers require us to collect or store any traffic data or personal information related to your use of VPN services. If any data center were to ask us to log such data, we would immediately cease operations with said data center and find alternative options.

Even if a government were to physically seize one of our VPN servers and manage to break its disk encryption, there would be no logs or information that would link any individual user to a particular event, website, or behavior.

7. THIRD-PARTY SERVICES

You may access other third-party services while using the VPN services, for example by clicking on links to those third-party services from within the Services. We are not responsible for the privacy policies and/or practices of these third-party services, and we encourage you to carefully review their privacy policies.

8. CHILDREN'S PRIVACY

We feel under a particular obligation to protect information obtained from young children. We would strongly urge parents to instruct their children never to disclose their real name, their address or their telephone number while they are on-line without prior permission. CorVPN does not knowingly collect information from children under the age of 18, and children under 18 years old are prohibited from using our services. If you learn that a child has provided us with personal information in violation of this Privacy Policy, you can alert us at customer-care@corstack.com.

9. ACCESS

When you become one of our users for the VPN services, you may access certain information associated with you by emailing customer-care@corstack.com. If you decide not to use our VPN services any more, any public activity on your Account prior to deletion may remain stored on our servers and may remain accessible to the public.

10. GDPR

CorVPN is committed to user privacy globally, and personal information under users' control and minimal collection of data are our existing practices. According to the requirements of the General Data Protection Regulation (GDPR) of the European Union (EU), we collect and process the data in a specific manner of users in EU outlined in this Privacy Policy on one of the following bases, depending on the circumstances:

i) For the purposes of fulfilling our contractual obligations to users, including:

  • Providing users with the VPN services and Apps they have requested.
  • Managing user subscriptions and processing payments.
  • Providing customer support.

ii) For a legitimate interest associated with the operation of our business, including: * Enhancing the quality, reliability, and effectiveness of our VPN Services, and Apps. * Communicating with customers to provide information and seek feedback related to our VPN services and Apps.

You can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. As well, you have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you.

You can exercise your rights under the GDPR to access, transfer, correct, delete, or object to the processing of your personal information by contacting us at customer-care@corstack.com.

11. INTERNATIONAL DATA TRANSFERS

CorVPN is a global business. We may transfer anonymize information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy.

12. CHANGES TO THIS PRIVACY POLICY

For the purpose to consist with applicable privacy laws and principles, this Privacy Policy may be modified from time to time without prior notice to you, so please review it frequently. Your continued use of our VPN services constitutes your acceptance of our Privacy Policy. Changes to this Privacy Policy will be posted on our websites. If we materially change the ways in which we use or share personal information previously collected from you through our VPN services, we will notify you through our APP, email, or other communication.

13. Contacts

If you have any questions or concerns about this Privacy Policy, please feel free to contact us at customer-care@corstack.com.