Legal information

MONO VPN Privacy Policy

The document explains what data is processed when running the web application and the Telegram Mini App. MONO VPN - no-logs VPN: no connection logs, traffic logs, DNS query logs, browsing history and VPN session timestamps. Account and payment data for subscription operation are processed separately.

Update date: August 31, 2026 Contacts: support@monovpn.app, @monosvpn_support_bot. English version: /en/privacy.

1. Introduction

1.1. The policy applies to the MONO VPN service on https://monovpn.app/ and in the Telegram Mini App of the bot @monosvpn_bot: access to NaiveProxy and SSTP profiles.

1.2. We strive to collect only what is necessary to provide access, accept payment, prevent abuse, and respond to requests.

2. What data is processed

2.1. Account details. Depending on the login method: email address; Google or Apple IDs; Telegram ID and associated Telegram Login / Mini App fields. They are needed to find out the subscription and give the profile.

2.2. Payments. Information about purchases is stored: amount, date, transaction IDs from the payment provider Lava.top. We do not receive or store complete card data - it is processed by the payment provider.

2.3. No-logs policy (no connection logs). MONO VPN does not store connection logs, traffic logs, DNS query logs, browsing history, or timestamps of VPN sessions. This no-logs statement applies to the VPN connection. Account and payment data are described in clauses 2.1–2.2 and are not VPN logs.

2.4. Customer technical information. The type of device, version of the application or Telegram client can be processed - to the extent necessary for compatibility and error analysis.

2.5. First-party product analytics. To improve the service, a random anonymous browser identifier, session identifier, public landing page path, referral source host and first-touch/UTM tags, as well as product stage events can be processed: page view, start of login, confirmed registration, trial, checkout, attempt and payment result. Aggregated traffic byte counters can be used to evaluate activation. This data does not include URLs, DNS queries, content or history transmitted within the VPN; Analytics does not record the content of the VPN session.

2.6. Behavioral analytics Microsoft Clarity. User pages may collect anonymized click and scroll maps, technical errors, and user interaction records. Admin panel excluded; the contents of the authorized account are masked; email, Telegram ID, internal user ID and VPN profile data are intentionally not transmitted. Until you consent separately, Clarity receives a signal to reject analytical and advertising cookies and operates in a limited manner without persistent cookie identifiers.

3. Why is this needed?

3.1. Issuance of access: subscription accounting, allocation of NaiveProxy and SSTP profiles.

3.2. Security: identifying abuse, fraud, attacks on infrastructure.

3.3. Communication: responses to requests, service messages about access and payments by email or Telegram.

3.4. Product improvement and measurement: analysis of the transition from a public page to registration, trial, payment and purchase in aggregated cohorts; preparation of service lifecycle messages before the end of the trial, after its end and upon expiration of paid access.

4. Transfer to third parties

4.1. Payment provider - payment and (if enabled) auto-renewal. Infrastructure providers - server hosting and data storage. Telegram - if you log in via a bot, Mini App or Telegram Login. Microsoft Clarity - anonymized behavioral analytics of user web pages with masking of sensitive content.

4.2. Data is not sold to advertising networks.

4.3. Information may be disclosed if required by a lawful request from an authorized body.

5. Shelf life

5.1. Payment records are kept for as long as needed for accounting, taxes and anti-fraud purposes.

5.2. Connection logs, traffic logs, DNS query logs, browsing history and VPN session timestamps are not stored (no-logs / no connection logs policy), so there is no retention period for such records.

5.3. A request to delete your account and personal data can be sent to support@monovpn.app. Deleting from backups may take up to 90 days due to the backup cycle.

6. Security

6.1. Communication between the device and servers is encrypted within the selected protocol. Profile credentials are stored using industry accepted security techniques. This does not guarantee the absolute impossibility of an incident.

7. Children

7.1. The Service is not intended for children under 13 years of age. Under 18 years of age can only be used with the consent of a parent or guardian.

8. Changes

8.1. The policy may be updated. Continued use of the service after the publication of a new version means agreement with it, unless otherwise required by law.