Last updated 9 November 2026.
Who we are
EliteVPN is an Oxford.Software company, operated by Aberdeen Equity Corp (“we”), the data controller for the personal data described here. Contact: privacy@elitevpn.cloud.
Data we collect
- Account data: email address and a bcrypt hash of your password.
- Subscription data: plan, status, renewal date, amount and Stripe references.
- Device data: device names you choose, device public keys, assigned tunnel addresses and regions.
- Account event log: sign-up, payment and device events with dates, without IP addresses.
- Support emails you send us.
We do not collect browsing activity, DNS queries, your IP address or connection times. The no-logs policy explains this in detail.
Why we use it, and our legal basis
- To provide the service you signed up for (performance of a contract).
- To take payment and keep tax records (contract and legal obligation).
- To prevent fraud and abuse of our infrastructure (legitimate interests).
- To send essential service emails such as receipts and renewal notices (contract). We do not send marketing email unless you opt in.
Who we share it with
- Stripe, for payment processing. Stripe acts as an independent controller for payment data, including the IP address used when paying.
- Hetzner Online GmbH, which hosts our servers in Germany, Finland, the United States and Singapore.
- Our email delivery provider, which receives your email address to deliver service messages.
- Authorities, only where legally required, and only the data listed above.
We do not sell personal data or share it for advertising.
International transfers
Our control plane runs in the EU. If you choose a region outside the UK/EU, your device’s public key and tunnel address are stored on that server. Where data is transferred outside the UK/EEA we rely on appropriate safeguards such as standard contractual clauses.
Retention
Account, subscription and device data are kept while your account exists and deleted when you delete it from your account page. Account event logs are kept for 12 months. Stripe retains payment records for as long as financial regulations require.
Cookies
We set one strictly necessary session cookie when you sign in. No analytics or advertising cookies.
Your rights
You can access, correct, export or delete your data, object to processing and complain to a supervisory authority (in the UK, the ICO). Most of this you can do yourself in your account; otherwise email privacy@elitevpn.cloud.
Children
The service is not intended for anyone under 18.
Changes
We will post changes here and email account holders about material changes before they take effect.