Privacy Policy

Last updated: 20 October 2026

This Privacy Policy explains which personal data FastTec B.V. processes when you use EdgeVPN: our apps, our VPN servers, our website edgevpn.tech and our web shop shop.edgevpn.tech. We wrote it to be clear and complete. If anything is unclear, email us at support@fasttec.net.

Summary

• We do not log your online activity. We do not record which websites you visit, what you download or stream, the content of your traffic, your DNS requests, or the addresses you connect to through EdgeVPN.
• We do not keep connection logs that link your real IP address to your use of the VPN. While you are connected, a VPN server must process your IP address to route your traffic; it is not stored after your session.
• You can use the EdgeVPN app without giving us your name or email address. The app identifies you with a random Customer ID.
• To run the service we keep a small amount of account data, such as your subscription status, your linked devices, and per VPN server the date of your last connection and your total data volume. This is all described below.
• If you buy Premium on our website, we process your name, email address and billing details to deliver your subscription and to issue invoices, as the law requires.
• We do not sell your personal data and we do not use it for advertising.

Who we are

EdgeVPN is a service of FastTec B.V., Mattenbieslaan 105, 3452 AD Vleuten, the Netherlands (Chamber of Commerce number 93135645, VAT number NL866288582B01). FastTec B.V. is the controller for the processing described in this policy. You can reach us at support@fasttec.net for any privacy question or request.

Our no-activity-logs policy

What "no logs" means at EdgeVPN:

• We never store: the websites and services you visit, the content of your traffic, your DNS queries, the IP addresses or domains you connect to through the VPN, or a history of your VPN sessions linked to your real IP address.
• What a VPN server keeps to provide the service: for each account that uses the server, a record with your account identifier (your Customer ID or a device key), the login credentials or keys for your connection, the internal VPN address assigned to you, your total data volume, and the date and time of your most recent connection. We use this to provide the connection, to apply the limits of your plan, and to detect and stop abuse.
• Short-lived technical logs: our servers keep error logs only. These are rotated automatically and kept for a few days at most. When a connection attempt fails, for example because of a wrong login, such a log can contain the IP address the attempt came from. We use these logs only to keep the service secure and working.

What we process, per part of EdgeVPN

The EdgeVPN app (phone, tablet, computer and TV)

• Customer ID: a random identifier the app creates when you first open it. It is not linked to your name or email address, unless you buy Premium on our website and link your phone to that account.
• Subscription status: whether you have Premium and until when. If you buy in the app, Apple or Google processes the payment; we receive the status of your subscription through our subscription platform Adapty.
• Connection requests: when you connect, the app sends your Customer ID (or device key), the location you chose and the protocol to our API, which returns the settings for a VPN server. Our API does not store your IP address. Cloudflare, which protects our API against attacks, processes it to deliver your request.
• Linked devices: if you link computers, browsers, TVs or routers to your subscription, we store for each device a random device identifier, the type of device and a label (for routers, the device's network name), the link key, the date it was linked and the date it last checked your subscription.
• Diagnostic reports: when a connection fails, the app automatically sends us a report so we can find and fix the problem. It contains your Customer ID, whether you have Premium, your platform and the versions of the operating system and the app, your public IP address and its approximate location (country, city, internet provider and network), the server location and protocol you used, error details and the results of short network tests. We keep these reports for 90 days.
• Showing your IP address: to show you your current IP address and location, the app requests them from ip-api.com, which receives your IP address for that purpose (the VPN server's address when you are connected).
• App analytics (iOS and Android): we use Google Firebase Analytics to understand how the app is used, with these events: first opening, first connection, location chosen, subscription started (plan and price), app use on several days, settings changed and app shared. Google also processes an app instance identifier, your device model, operating system and approximate location (country or region). We have disabled the advertising identifier.
• Notifications: if you allow notifications, Google Firebase Cloud Messaging processes a device token so we can send you service messages.

The browser extension

• On your device the extension stores a random device identifier, the link key of your subscription, the login for our proxy and your settings.
• It sends your device identifier and a label such as "Chrome on Windows" to link the extension, and your link key and chosen location to get a proxy connection.
• To show your current IP address it contacts api.ipify.org, which receives that address.
• The extension does not use analytics.

Our website edgevpn.tech

• Analytics and ad measurement: with your consent only, we use Google Analytics to see how our website is used and Google Ads to measure whether our ads lead to purchases in the web shop. See Cookies below.
• Data deletion requests: if you use the deletion form on our website, we receive the Customer ID you enter.
• Emails to support: if you email us, we process your email address and the content of your message to answer you.

Our web shop shop.edgevpn.tech

• Account: your email address, name and password (we store only an encrypted hash of it), the dates you created the account and last signed in.
• Billing and orders: your billing name, company, address, country and VAT number, the plans you bought, prices, discounts, payments, invoices and credit notes. We check VAT numbers with the European VIES service.
• Proof of your order: when you order, we store the date and time, the version of the terms you accepted and the IP address you ordered from.
• Payments: Stripe processes your payment. We never receive or store your card details.
• Your devices: the Customer ID of the phone you link and the devices you link to your subscription.
• Emails: we send transactional emails only (confirmation, invoices, payment problems, password reset), through Brevo. We keep a record of the emails we sent.
• Ad measurement: only if you accepted cookies on edgevpn.tech, we tell Google Ads that a purchase was completed (order number, amount and currency), so we can see which ads lead to purchases. We do not send your name, email address or other account details to Google.

Why we process your data and on which legal basis

• To provide EdgeVPN and your subscription (performance of a contract, Article 6(1)(b) GDPR): connecting you to our servers, your account and linked devices, payments, invoices, support.
• To meet legal obligations (Article 6(1)(c) GDPR): keeping invoices and accounting records for 7 years, as Dutch tax law requires.
• For our legitimate interests (Article 6(1)(f) GDPR): keeping the service secure and preventing abuse and fraud, fixing connection problems with diagnostic reports, improving the app with analytics, and being able to prove what you agreed to. We have weighed these interests against your privacy and keep the data limited. You can object at any time (see Your rights).
• With your consent (Article 6(1)(a) GDPR): analytics cookies on our website and notifications in the app. You can withdraw your consent at any time.

How long we keep your data

• Customer ID, subscription status, linked devices and VPN server accounts: for as long as you use EdgeVPN. When you ask us to delete your data, we delete it within 30 days.
• Diagnostic reports: 90 days.
• Error logs on our servers: a few days at most, rotated automatically.
• Web shop account: until you ask us to delete it.
• Invoices and order records: 7 years, as required by Dutch tax law. Unpaid orders are deleted after 90 days.
• Records of emails we sent: 2 years.
• Support emails: until your question has been resolved, and at most 12 months after that.
• Website and app analytics: at most 14 months.
• Backups: deleted data can remain in our backups for at most 30 days.

Who receives your data

We share personal data only with service providers that process it for us, under a data processing agreement, and only as far as needed:

• Adapty (United States): subscription status of app purchases.
• Google Firebase (United States): app analytics and notifications.
• Stripe (Ireland): payments in the web shop.
• Brevo (France): sending emails from the web shop.
• Hetzner Online (Germany and Finland): hosting of our API and web shop.
• Hostinger: hosting of our website.
• Cloudflare (United States): protection of our API against attacks.
• Hosting providers of our VPN servers, in the country of each server: they provide the servers on which the VPN runs.
• ip-api.com and ipify.org: only receive your IP address when the app or the extension shows it to you.

Independent of us, Apple and Google process your data as controllers when you buy in their app stores, and Google does so for Analytics and Google Ads. We share data with authorities only when the law requires us to; because we do not log your online activity, we cannot provide information about it.

Transfers outside the European Economic Area

Some of these providers are based in, or have access from, the United States. We transfer data there only with appropriate safeguards: the EU-U.S. Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses. Our VPN servers are located in many countries. When you connect to a server outside the European Economic Area, your traffic is routed through that country by your own choice, and the server keeps only the account record described above.

Security

We protect your data with encryption in transit (TLS), encrypted VPN protocols, access restricted to the people who need it, firewalls and hardened servers, and regular backups. Passwords for web shop accounts are stored only as a strong hash.

Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time. To use your rights, email support@fasttec.net:

• For the app, include your Customer ID (in the app under Settings). You can also request deletion with the form at edgevpn.tech/delete-request.
• For the web shop, write from the email address of your account.

We answer within one month. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the authority in your own country.

Children

EdgeVPN is not intended for children under 16. We do not knowingly process data of children under 16 without the consent of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

Cookies

Website edgevpn.tech:

• NEXT_LOCALE: remembers your language. Strictly necessary, no consent needed. Deleted when you close your browser.
• Your cookie choice and the state of our announcement bar are stored in your browser's local storage. Strictly necessary.
• edgevpn_consent: remembers your cookie choice for both edgevpn.tech and shop.edgevpn.tech. Strictly necessary. It expires after 12 months.
• _ga and _ga_*: Google Analytics, only after you click Accept. They expire after at most 2 years. You can change your choice at any time with Cookie settings at the bottom of every page.
• _gcl_au and _gcl_aw: Google Ads, only after you click Accept. They remember that you arrived through one of our ads, so a purchase in the web shop can be attributed to it. They expire after 90 days.

Web shop shop.edgevpn.tech:

• token: keeps you signed in. Strictly necessary. It expires after 7 days.
• When you pay, Stripe sets cookies on its own payment page to prevent fraud, under Stripe's privacy policy (stripe.com/privacy).
• _gcl_au and _gcl_aw: Google Ads, only if you accepted cookies on edgevpn.tech. They expire after 90 days.

We do not use cookies to build advertising profiles or to show you ads on other websites.

No automated decisions

We do not make decisions about you that are based solely on automated processing and that have legal or similarly significant effects.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If we make important changes, we will tell you through the website, the app or by email before they take effect.

Contact

FastTec B.V., Mattenbieslaan 105, 3452 AD Vleuten, the Netherlands. Email: support@fasttec.net.