Your account
OrbitVPN stores your username, a one-way password hash, account status, access expiry, device allowance, data allowance, plan and location preferences, and any short support note I add while helping with the account. Your plain-text password is not stored in the account database.
Your devices
For each signed-in device, OrbitVPN stores a generated device identifier and public key, the device name shown by the app, platform, status, creation time, and last contact time. These records are used to enforce device limits, replace an older device when required, and revoke access without changing every user's connection details.
Usage and connection records
The service records daily upload and download totals for each account, device, and exit server. It also keeps the credentials needed for that device to use an available exit. Fleet reports contain server health, capacity, recent aggregate session counts, and network load. They are operational measurements, not a browsing history.
OrbitVPN does not intentionally log the websites you visit, DNS queries, or the contents of your traffic. Your encrypted traffic passes through the selected OrbitVPN server and its hosting provider, which can necessarily observe network metadata such as addresses, timing, and volume.
Sign-in and service security
Failed sign-in attempts are rate-limited using a server-side hash derived from the source address and username. Short-lived session tokens identify the account and device to the service. Administrative actions are recorded so account changes and revocations can be traced. Cloudflare and the server hosting providers also process ordinary request and security information under their own policies.
How long the records remain
Account, device, and daily usage records remain while the account is operated. There is not currently a promised automatic deletion schedule. If you ask me to delete an account, its linked device, connection-credential, and usage records are deleted from the active control database. Limited administrative audit entries may remain so security-sensitive changes can still be traced.
WhatsApp and email
If you contact me for access or support, the message and contact details remain in WhatsApp or email under that service's own privacy and retention rules. Do not send your password, identity documents, or information that is not needed to solve the problem.
Questions or deletion requests
Message +92 324 3122544 on WhatsApp or email furqanshaheer@gmail.com. Include only the OrbitVPN username you want me to check or delete. This page describes the current beta and will be updated if the data handling changes.