Privacy Policy

Overview

FreeNepalVPN is designed around a separation between the web control plane and VPN nodes. The web application manages accounts, plans, devices, server availability and usage records. VPN nodes provide WireGuard connectivity.

Information we may store

Depending on the features you use, the service may store your email address, display name, authentication identifiers, plan, registered devices, account-level data usage, support messages, payment records, VPN peer public keys, assigned internal VPN addresses, connection health metadata and timestamps.

WireGuard keys

The client architecture is designed so the WireGuard private key is generated and retained on the user device. The control plane needs the corresponding public key to provision a VPN peer.

Authentication

Email/password accounts store one-way password hashes. If Google sign-in is enabled, the service may store the verified Google email address and Google's stable account subject identifier. Administrative integration secrets are encrypted at rest using the application's private APP_KEY.

Operational and security data

We may retain limited technical information needed to operate and protect the service, such as login IP addresses, server heartbeats, bandwidth counters, peer handshakes, error information and security/audit events. The exact production retention policy should be finalized before public launch.

Third-party services

If enabled by the administrator, email delivery, Google authentication, CAPTCHA, payment services and hosting providers process data under their own policies. Their use depends on the configuration active at the time.

Contact

Questions about privacy can be sent through the authenticated support portal or to [email protected].