Node夜光云 Privacy Policy

Last updated: 2026-10-22

This Privacy Policy explains what information the operator of Node夜光云 ("we", "us") collects when you use the Node夜光云 website, our apps for iOS, Android, Windows and macOS, and our VPN service (together, the "Service"), how we use it, and the choices you have. We designed the Service to collect as little information as possible.

Operator: the operator of Node夜光云
Contact: our customer support

Our commitments at a glance

• No activity logs. We do not log or store the websites you visit, the content of your traffic, your DNS queries, or any record that links your VPN traffic to you.
• We never sell or share your data. We do not sell, rent, trade or otherwise disclose user data, including traffic data, browsing history, DNS queries or connection information, to any third party for any purpose, including advertising, analytics, profiling or data brokerage.
• No ads and no trackers. Our apps and website contain no third-party advertising SDKs, no analytics SDKs and no trackers that collect personal data, and we do not show ads.
• Minimal data, deletable at any time. We keep only what is needed to run your account, and you can delete your account and data at any time.

1. What we do not collect

When you use the VPN, we do not collect or store:

• the websites, apps or services you access, or the content of your traffic;
• your DNS queries;
• the IP address assigned to you inside the VPN tunnel, or logs of VPN sessions (connection start and end times, session duration, or the IP address you connect from);
• your contacts, photos, precise location, microphone or camera data, or advertising identifiers (IDFA / AAID).

VPN servers keep only the short-lived, in-memory connection state needed to route your traffic and to enforce the device limit of your plan; it is discarded when the connection closes and is never written to logs. To protect our network from abuse, some servers automatically refuse certain connection types (for example BitTorrent) by recognising the protocol at the start of a connection; this check happens in memory, records nothing, and never reads or stores the content of your traffic.

2. Information we collect and why

• Account information: username and email address, used to sign in, recover your password and send service notices. If you link Telegram, we store your Telegram account ID. Passwords are stored only as one-way salted hashes.
• Sign-in and subscription records: the IP address, time and client type when you sign in to your account or when the app downloads its server list. These records are used only to protect your account (detecting unusual sign-ins and account-sharing abuse). Sign-in records are kept for 30 days and subscription records for 10 days, then deleted automatically. They are not linked to what you do while connected to the VPN.
• Data usage totals: the total number of bytes used by your account, used to enforce plan data limits and show your usage. We do not record destinations or content.
• Orders and payments: items purchased, amount, time, order number and the payment provider's transaction ID. Payments are processed by Apple (App Store), Google (Google Play) or our payment providers; we never receive your card number or payment account credentials.
• Support messages: messages and screenshots you send to customer support, used only to resolve your request. When you use the live chat on our website, we also store the IP address of your browser, the approximate location (city level) derived from it, and your browser and operating system type, so that support staff can identify the conversation and block abuse. Common questions may be answered by an automated assistant; to answer, it processes the text of your message together with basic account details (such as your plan, expiry date and data usage). If that assistant runs on a third-party AI service, only this information is sent to it — never VPN traffic or browsing data.
• App technical information: the app sends its platform and version number with requests so we can keep it compatible. The app does not collect crash analytics or usage analytics.

3. How the VPN works

Our apps use the operating system's VPN interfaces (Apple Network Extension / NEVPNManager on iOS and macOS, VpnService on Android) to create an encrypted tunnel from your device to the server you select. Your traffic is encrypted between your device and our server, which then forwards it to its destination. Routing rules (which traffic goes through the VPN and which goes direct) run on your device. Our servers forward traffic and do not log it.

Threat Protection (optional, our apps only): when enabled, the app periodically downloads from us a list of known phishing, scam and malicious websites and checks the sites you visit against it on your device, warning you or blocking the site when there is a match. The check happens entirely on your device: we never learn which sites you visit or whether anything matched, and the download link does not identify you. Match history is kept only on your device (7 days by default, and you can clear it at any time). Only if you choose to tap "Report" or "Not a threat" does the app send us that single domain, and the report is not linked to your account. The lists reduce risk but cannot catch every malicious site and may contain mistakes. You can turn the feature, or any of its levels, off in the app at any time.

4. Commitments under Apple App Store Review Guideline 5.4

In line with Apple's requirements for VPN apps, we confirm that:

• we do not sell, use or disclose to third parties any data collected through the VPN, for any purpose;
• we clearly disclose, before you purchase or use the Service, what user data we collect and how it is used (in this policy and inside the app);
• our iOS app uses Apple's official NEVPNManager / Network Extension API;
• our apps contain no third-party advertising or analytics SDKs and do not collect data for advertising or tracking;
• we do not use the VPN to collect or inspect your personal data, and our apps are not offered in App Store or Google Play regions that require a VPN licence or prohibit VPN services.

5. When we share information

We do not sell your personal information and do not share it for advertising. We share limited information only:

• Payment processing: with Apple, Google or our payment providers, limited to what is needed to complete and verify a purchase (order information).
• Service providers who help us operate the Service under confidentiality obligations: our email delivery provider (your email address, to send notices); a third-party live-chat provider if one is enabled on our website (only the messages you send in the chat window); an AI service if we use one to help answer support messages (the message text and basic account details described above); and an IP geolocation service used by the website's optional network-check tool (the IP address you check).
• Network check: if you run the optional network check on our website, your browser contacts public STUN servers (by default operated by Cloudflare and Google) to test for WebRTC leaks. Like any server your browser connects to, they can see your IP address; we do not receive or store the results.
• Legal requirements: if required by applicable law or a valid legal order. Because we keep no activity logs, we have no browsing history or traffic records to provide.
• Business transfers: if the Service is reorganized or transferred, this policy will continue to apply to your information.

6. Data retention

• Account information: until you delete your account.
• Sign-in records: 30 days. Subscription records: 10 days.
• Order and payment records: while your account exists. App store transaction IDs are kept after account deletion, without any link to you, only to prevent the same purchase from being claimed twice.
• Support messages: until your request is resolved and for a reasonable period afterwards, or until you delete your account.

7. Security and storage

We protect data with encrypted connections (HTTPS / TLS), hashed passwords, access controls and rate limiting. Data is stored on servers we operate. If you access the Service from outside the country where our servers are located, your information will be transferred to and processed in that country under the safeguards described in this policy.

8. Your rights and choices

• Access and correction: view and update your information in your account settings on the website or in the app.
• Deletion: delete your account at any time in the app under "Me → Delete account" or at https://www.ipclouds.top/account-deletion. Your account, credentials, plans, balance and order history are deleted permanently.
• Other rights: depending on where you live (for example under the EU/UK GDPR or California law), you may have the right to request a copy of your data, object to or restrict processing, or lodge a complaint with your local data protection authority. Contact us at our customer support to make a request; we will respond within 30 days.
• California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use personal information for cross-context behavioral advertising.
• Subscriptions: auto-renewing subscriptions purchased through an app store must be cancelled in your device settings; deleting your account does not cancel them.

9. Cookies and local storage

Our website uses only essential storage: a sign-in token kept in your browser so you stay signed in, and preferences such as language and light/dark theme. We do not use advertising or cross-site tracking cookies.

10. Children

The Service is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age required in your country). If you are under 18, use the Service only with the consent of a parent or guardian. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for material changes, notify you on the website or in the app.

12. Contact us

the operator of Node夜光云
Email: our customer support