Legal
Privacy Policy
Last updated: October 7, 2026
This policy explains what personal data NoTrail VPN ("NoTrail," "we," "us") handles when you use notrailvpn.com and the NoTrail VPN app, and why. The data controller is Piz' Company, trading as NoTrail VPN, registered with the Dutch Chamber of Commerce (KvK) under number 76153614, VAT number NL003051165B94, address: Torenlaan 5, 1402AT Bussum. Questions about your data: legal@notrailvpn.com.
The short version
You don't create an account, and we don't ask for your name, phone number or address. We keep only what we need to deliver your VPN access and handle payments. We do not sell personal data, we do not use it for advertising, and the app contains no advertising or analytics trackers.
What we process
- Email address (website purchases only) — entered at checkout, used to send your receipt and login code and to find your order if you contact support. Legal basis: performing our contract with you.
- Order and subscription records — what you bought, amount, currency, dates, and for subscriptions the status. For App Store purchases this includes Apple's anonymous transaction identifiers and the product bought, which we receive from Apple to verify your purchase. We do not receive your name, Apple ID or payment details from Apple. Legal basis: contract and our legal obligation to keep accounting records.
- Login code and VPN account — a short code that links the app to your pass, and a randomly generated username on the VPN network. Neither contains your email address or your identity.
- Technical data needed to run the service — such as your IP address when your device contacts our servers, and the usual short-lived server logs used to keep the service secure and to prevent fraud or abuse. Legal basis: our legitimate interest in running a secure service.
What we do not do
NoTrail's own systems do not record the websites you visit, what you download, or the content of your traffic inside the VPN tunnel, and we don't build profiles of individual users. Establishing a VPN connection necessarily involves technical connection data (for example your IP address) being handled by the network that carries it; see "Who we share data with" below.
Payments
Purchases in the iOS app are processed by Apple under Apple's terms and privacy policy; we never see your card or Apple payment details. Purchases on this website are processed by Stripe; we never receive or store your card number. See Stripe's privacy policy and Apple's privacy policy.
Who we share data with
- Apple — App Store purchases and subscription notifications.
- Stripe — website payments, receipts and subscription management.
- VPNresellers.com — the wholesale supplier whose network carries VPN connections. We give it only the randomly generated username needed to create your access, never your email address or real identity. The supplier's own policies govern what its network infrastructure processes.
- Hosting and email providers — Railway (backend), Netlify (website) and our transactional email provider, who process data on our behalf to run the service.
Some of these providers are located outside the EU/EEA, for example in the United States. Where that happens we rely on an adequacy decision or on standard contractual clauses. We share data with authorities only when legally required to do so.
How long we keep data
Order and billing records are kept for the period Dutch tax law requires (currently seven years). VPN accounts at our supplier are deactivated once your pass has expired or your subscription has ended. Technical logs are kept only briefly. Email addresses used only for delivery and support are deleted on request unless we must keep them for accounting.
Your rights
Under the GDPR you may ask us for access to, correction of, or deletion of your personal data, to restrict or object to processing, and to receive your data in a portable format. Email legal@notrailvpn.com; we answer within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Children
NoTrail VPN is intended for adults. Purchases require you to be 18 or of legal age in your country, and we do not knowingly collect data from children.
Changes
If we change this policy we update the date above, and for material changes we will make that clear on this page before they take effect.
Contact
Privacy and data-rights requests: legal@notrailvpn.com. General support: support@notrailvpn.com.