Privacy Policy

1. General Provisions

This Policy applies to all data the Operator receives as a result of the User's use of the MeerGuard White service (hereinafter — the "Service"). The Operator respects users' rights and freedoms and seeks to minimize data collection. MeerGuard White does not collect documentary or other extended personal data (full name, passport details, addresses, phone numbers).

2. What Data We Collect

We DO NOT collect:

• Browsing history
• Traffic contents
• DNS queries
• IP addresses after session ends
• Connection timestamps

We collect minimally necessary data:

• Telegram ID or Apple ID (obtained via Sign in with Apple as an anonymous identifier) — for account identification and VPN key issuance
• Username (nickname), interface language, interaction time — technical data needed for service operation
• Traffic volume used — for plan limit tracking
• Payment data (status, amount, date, last 4 card digits, transaction ID) — received from the payment provider; full card data, CVV, and expiration date are NOT received or stored by the Operator. For App Store purchases, payment data is handled exclusively by Apple — the Operator receives only the fact of purchase, the transaction identifier, and the account linkage
• Anonymous identifiers of connected devices, the date each device was added, and the number of active connections — for device limit tracking and processing additional device purchases
• Technical logs: Service errors, subscription status, trial period activation, auto-renewal toggle events
• iOS application crash diagnostics via Sentry (stack traces and error context without VPN traffic content) — for prompt issue resolution

3. No-Logs Policy

MeerGuard White adheres to a strict no-logs policy. We do not track, record, or store any information about your internet activity when using our service. MeerGuard White does not maintain a traffic log and does not identify the user through VPN nodes.

4. Purposes of Data Processing

Data is processed strictly for:

• Providing access to the subscription and VPN service
• Proper operation of the website and Telegram bot
• Activation, renewal, or cancellation of the subscription
• Payment processing
• Notifying about subscription status
• Tracking the device limit within the plan
• Processing and billing additional connections (device purchases)
• Improving service quality (error analysis)
• Preventing abuse and violations

4A. Web analytics and cookies

To understand how to improve the site, we use the following analytics services:

• Yandex.Metrica — visit statistics, traffic sources, anonymised on-page behaviour. Operated by Yandex LLC.
• Yandex.Webvisor (part of Metrica) — anonymous recording of user actions: mouse moves, scrolling, clicks, form input. Password and payment data fields are automatically masked with asterisks. Used solely to analyse interface usability.
• Google Analytics 4 (G-CYX19RHRND) — anonymised visit statistics (traffic source, aggregated behaviour). Operated by Google LLC.

These services do not receive access to your email, password, VPN key or payment details — only anonymised behavioural site statistics. Webvisor recordings are linked to an anonymous visitor cookie ID, not to your account.

You can disable web analytics through your browser settings (Do Not Track), private mode, ad-blocker extensions (uBlock Origin, AdGuard) or built-in tracking protection. The VPN service will continue to work without analytics.

5. Legal Basis

Data processing is based on:

• Article 6 of Federal Law No. 152-FZ "On Personal Data"
• User consent (expressed by the fact of using the Service)
• Necessity of contract performance — providing access to VPN configurations

6. Third-Party Data Sharing

Data may be transferred only to the following categories of recipients and only to the extent necessary for the operation of the Service:

• Payment providers — for payment processing (e.g., YooKassa for Russian card payments; CryptoPay for cryptocurrency; Tribute and other providers may be added as connections are established). The specific set of transferred data depends on the provider and its own policy
• Apple — when using the iOS application: for Sign in with Apple (anonymous user identifier), App Store subscription payments (StoreKit), and push notification delivery (APNs). Apple's data processing is governed by its own privacy policy
• Services that ensure the operation of the VPN infrastructure (e.g., management panels such as Remnawave / Marzban) — only technical identifiers necessary for issuing the VPN configuration
• Email delivery service (Resend) — when email notifications and confirmations are used
• Sentry error monitoring service — anonymous stack traces and technical diagnostics from the iOS application, without personal data or VPN traffic content

The Operator does not sell or share data with advertising agencies, data brokers, or other third parties. Data is transferred to government authorities only on the basis of law.

7. Data Storage and Protection

Data is stored in secure storage with restricted access. The Operator applies modern technical and organizational protection measures: encryption in transit and at rest, service isolation, and data minimization based on the "necessary minimum" principle. Access to user data is restricted and provided only to authorized personnel. All data is stored only for as long as necessary to operate the Service and comply with legal requirements. After the subscription ends, data is gradually deleted or anonymized.

8. Data Deletion and Withdrawal of Consent

The User may at any time: request information about stored data; demand deletion of their data; withdraw consent to processing; discontinue use of the Service. To do this, please contact our support. After data deletion, the Service may become unavailable (we will not be able to identify the user).

9. Cookies

Our website uses a minimal number of cookies to ensure site functionality (saving the selected language, theme, and the JWT session for cabinet login). We do not use cookies for tracking, behavioral analytics, or advertising.

10. Cross-Border Data Transfer

The Operator does not transfer personal data outside the Russian Federation on its own. Payment systems and the Telegram service may process data on their own servers in accordance with their own policies — this is determined by the policy of the respective provider.

11. Contacts

For questions related to privacy, requests for data deletion, or withdrawal of consent, please contact:

• Telegram: @MeerGuardSupport_bot
• Email: info@v-p-n-wl.app