Introduction
This policy explains how Luxorl (, ) (“Luxorl”, “we”, “us”) handles personal data when you use luxorl.com and the Luxorl VPN service and applications. We are the controller of that data.
Data we collect
- Order requests: when you request a plan on luxorl.com we receive your email address, your name if you give it, the plan and billing period you chose, the time of the request and the IP address it came from — used to send your order details and payment link and to prevent abuse.
- Account data: email address, a securely hashed password and your app preferences.
- Billing data: card and PayPal details are processed by our payment provider. We receive the payment status, plan, country and, for cards, the last four digits — for receipts and tax purposes.
- Service usage: To enforce device limits we keep a count of active sessions in memory only; it is discarded when the session ends.
- Support data: messages you send to our support team and our replies.
- Crash reports: only if you enable them in the app. They contain the app version, operating system and error details — never traffic data.
- Website data: essential storage, and analytics or marketing cookies only with your consent (see the cookie policy).
Data we do not collect
We do not collect browsing history, traffic content, DNS queries, the IP address you connect from, or connection timestamps linked to your account.
How we use data
To provide and secure the service, manage your subscription, respond to support requests, comply with legal and tax obligations and, with your consent, measure how our website is used.
Legal bases
We process account and billing data to perform our contract with you, security data based on our legitimate interest in protecting the service, invoices to meet legal obligations, and optional cookies and marketing emails based on your consent, which you can withdraw at any time.
Sharing
We share data only with service providers that help us operate Luxorl — payment processing, email delivery, support software and server hosting — under contracts that limit them to our instructions. We never sell personal data or share it for advertising.
Retention
Account data is kept while your account is active and for 30 days after closure. Billing records are kept for as long as tax law requires, typically up to 7 years. Order requests that don't lead to a purchase are deleted after 90 days. Support messages are kept for 2 years and crash reports for 90 days.
International transfers
When data is transferred outside the European Economic Area or the United Kingdom, we rely on the European Commission's standard contractual clauses or an equivalent safeguard.
Your rights
Depending on where you live, you may request access to your data, correction, deletion or a portable copy, object to or restrict processing, and withdraw consent. Contact our support team. You also have the right to lodge a complaint with your data protection authority.
Children
Luxorl is not intended for children under 16, and we do not knowingly collect their data.
Changes to this policy
We update the date at the top of this page whenever the policy changes. For significant changes, we will also notify you by email before they take effect.
Contact
For any privacy question, contact our support team.