Privacy Policy

How we handle personal data under UK GDPR — including our no-logs policy.

Effective: 2026-08-11

JaguarVPN is operated by Stacklab X Ltd ("we", "us"), a company registered in the United Kingdom. We are the data controller for the personal data described here. Questions or requests: use our contact form.

1. Our no-logs commitment

We do not monitor, log or store the websites you visit, your DNS queries, the content of your traffic, or the IP addresses assigned to you while connected. We cannot tie browsing activity to a user because we do not keep it.

2. What we collect

• Account data: email address and, optionally, your name.
• Billing data: processed by our payment providers (Stripe, PayPal, Apple, Google, crypto processors). We store a record that a payment occurred (amount, currency, plan, status) but not your full card number.
• Anti-abuse / security signals: limited technical identifiers — such as IP address at signup/checkout, device fingerprint and coarse network signals — used to prevent free-trial and refund abuse and to protect the service. See Terms and Refund Policy.
• Minimal operational data: aggregate connection metadata (e.g. total bandwidth, timestamps of a session) needed to run the service and enforce plan limits — never a browsing history.
• Support & contact: anything you send us via the contact form or support desk.
• Cookies & similar: see our Cookie Policy.

3. Legal bases (UK GDPR)

• Contract: to provide the Service you signed up for.
• Legitimate interests: securing the network, preventing fraud/abuse, and improving the Service.
• Consent: optional analytics, crash reporting and marketing (you can withdraw any time).
• Legal obligation: where the law requires (e.g. tax records).

4. How we use your data

To provide and secure the Service, process payments, prevent abuse, respond to you, and meet legal duties. We do not sell your personal data.

5. Sharing

With processors acting on our instructions (payments, hosting, email delivery, crash/analytics where enabled), and with authorities only where legally compelled — see our Law Enforcement policy and Transparency Report.

6. International transfers

Where data is processed outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Retention

We keep account and billing records for as long as your account is active and as required by law, then delete or anonymise them. Anti-abuse signals are kept only as long as needed for that purpose.

8. Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time — from your account or via our contact form. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

9. Children

The Service is not directed at children under 13 (or the age of digital consent in your country); we do not knowingly collect their data.

10. Changes

We may update this policy; material changes will be notified in-app or by email. Continued use after the effective date means you accept the update.