Privacy Policy

Last updated: October 19, 2026

VPNBaron provides a virtual private network (VPN) service. This policy explains what we collect, why, who it goes to, how long we keep it, and your rights. It covers vpnbaron.com, our apps and the VPN service.

1. Who we are

VPNBaron is operated by VOIDXD SRL, Str. Avionului 60, 014336 Bucharest, Romania ("we", "us"). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, write to support@vpnbaron.com.

2. What the VPN does not log

While you are connected, we do not monitor, record, store or share:

• The websites you visit, the content you access, or your DNS queries.
• Your originating IP address tied to your browsing activity.
• The contents, destinations or metadata of your traffic.

Because we do not keep these records, we cannot hand them over, to you, to anyone else, or in response to a legal request.

3. What the VPN does keep

To run the service and stop abuse, we keep only:

• The number of active sessions on your account, so we can apply your plan's device limit.
• How much data your account uses, to detect and stop abuse. This is a volume, not a record of what the data was or where it went.
• Your connection credentials: your VPN username and password, and the keys for the stealth protocols.
• WireGuard devices you add: the name you give each device, its public key, and when it last connected.

4. What we collect through your account and our website

• Account. Your email address and a hashed password (or the account you sign in with, if you use Google or Apple sign-in), and an optional display name.
• Sign-ins and security. When you sign in to the website or the apps, the time, IP address and browser or app used, to keep your account secure and spot misuse.
• Subscription and billing. Your plan, its status and renewal dates, and a record of payments, refunds and redeemed codes, kept for accounting and tax. We never see or store your full card number.
• Support. The messages and attachments you send us.
• Website visits. The pages you visit on vpnbaron.com, the site or campaign that brought you, and your IP address, so we know how people find us and which pages work. When you create an account we estimate your country from your IP address.
• Our emails. Which emails we sent you and whether you clicked a link in them. We do not track whether you open them.

5. Payments

Payments are handled by processors who receive what they need to complete the transaction. We receive the payment confirmation and your subscription status, never your card or account credentials.

• Stripe, for payments on our website.
• Apple App Store and Google Play, for purchases and free trials in our mobile apps, with RevenueCat keeping track of those subscriptions for us.
• PayPal and a cryptocurrency processor, for some older subscriptions.

6. Cookies

• Necessary cookies keep you signed in, protect forms and remember your display settings and your cookie choice. They are always on.
• Our own measurement cookies remember the page or link that first brought you to us, so we can tell which pages and campaigns work. They stay on our servers and are never shared.
• Analytics cookies, from Google Analytics, Microsoft Advertising and the Reddit pixel. They measure site traffic and which visits, including visits from our ads, led to a sign-up or purchase, and they never see your VPN activity. You can switch them off under "Customize" in our cookie banner.

To change your choice later, delete our cookies in your browser and the banner will show again. You can also opt out of personalised ads at account.microsoft.com/privacy/ad-settings (Microsoft) and in your Reddit account's privacy settings (Reddit).

7. Why we use your data, and our legal basis

• To provide the service you signed up for: your account, the VPN, billing, support and service emails such as receipts and sign-in codes. Legal basis: performing our contract with you.
• To keep accounting and tax records. Legal basis: our legal obligations.
• To keep the service secure and prevent abuse, including the session count, data volume and sign-in records. Legal basis: our legitimate interest in a safe, working service.
• To understand how people find us with our own measurement cookies and visit records. Legal basis: our legitimate interest in improving the site and our marketing.
• To send you news and offers by email as a customer or former customer. Legal basis: our legitimate interest in telling customers about our service. Every email has a one-click unsubscribe link.
• Analytics cookies. Legal basis: our legitimate interest in measuring our site and our ads. You can opt out at any time.

8. Who we share data with

We do not sell your personal data. We share it only with service providers who process it for us under contract, and only what each one needs:

• Hosting: Hetzner (Germany) for our website and apps' servers, and OVH (France) for our email server.
• Payments: Stripe, Apple, Google, RevenueCat, PayPal and our cryptocurrency processor (see section 5).
• Country lookup at sign-up: ipwho.is.
• Site analytics, unless you opt out: Google (Analytics), Microsoft (Advertising) and Reddit (pixel).

We also disclose data to authorities only when the law requires it; where a request asks for activity data we do not keep, we have nothing to give. If VPNBaron is ever sold or merged, your data would pass to the new owner under this policy.

9. International transfers

Some of these providers are in the United States or process data there. Those transfers are covered by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

10. How long we keep data

• Account and VPN data: while your account exists. When you delete your account, we delete it, except what we must keep by law.
• Payment and invoice records: as long as Romanian tax and accounting law requires, generally up to 10 years.
• Support messages, sign-in records, website visits and email records: as long as they are useful for the purposes above, then deleted or anonymized.

11. Security

We use encryption in transit, hashed passwords, restricted internal access and regular updates. No system is perfectly secure, but we work continuously to protect your data.

12. Your rights

You have the right to access your data, correct it, delete it, receive it in a portable format, restrict or object to how we use it (including marketing emails and our analytics cookies, at any time). Write to support@vpnbaron.com and we will answer within one month. You can also delete your account yourself in your account settings.

If you think we have mishandled your data, you can complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro), or to the authority where you live.

13. Children

VPNBaron is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

14. Changes to this policy

When we change this policy we update the date at the top, and for important changes we will tell you by email or in the apps.

15. Contact

VOIDXD SRL, Str. Avionului 60, 014336 Bucharest, Romania · support@vpnbaron.com