Privacy Policy
Last updated: 19 July 2026 · v2026-07.2 · Version 2026-06
How we handle personal data under UK GDPR — including our no-logs policy.
Effective: 2026-07-19 · Controller: Stacklab X Ltd (trading as JaguarVPN), registered in England & Wales (Company No. 16537732), 176-178 City Road, Cardiff, Wales, CF24 3JF.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Stacklab X Ltd ("JaguarVPN", "we", "us") is the data controller for the personal data described here. For any privacy question, contact [email protected]; our Data Protection Officer is reachable at [email protected].
2. Our no-logs commitment
JaguarVPN operates a strict no-activity-logs policy. We do not record, store, or monitor: your browsing history, the websites or services you visit, your DNS queries, the content of your traffic, or the IP addresses you connect to through the VPN. Our VPN servers are engineered so that this activity is never written to disk.
3. What we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Email + password (hashed) | Create and secure your account | Contract |
| Subscription & payment records (via Stripe/PayPal/crypto — we never store full card numbers) | Provide the paid service, invoicing, tax | Contract / Legal obligation |
| Device metadata (platform, app version, device identifier) | Enforce device limits, deliver the service, security | Contract / Legitimate interests |
| Aggregate, non-identifying connection metrics (e.g. total bandwidth, server load) | Operate and scale the network | Legitimate interests |
| Diagnostic/crash reports (opt-in) | Fix bugs and improve stability | Consent |
| Support messages | Answer your queries | Contract / Legitimate interests |
| Marketing communications | Send product news if you opt in | Consent |
We do not sell your personal data, ever.
4. Cookies & similar technologies
Our website uses essential cookies (for login/session), and — only with your consent — analytics and anti-bot (Cloudflare Turnstile) technologies. See our Cookie Policy for details and controls.
5. Data retention
We keep account and billing records only for as long as your account is active and thereafter for the period required by law (e.g. tax/accounting records: 6 years). Diagnostic data is retained for a limited period and then deleted or anonymised. Because we do not keep activity logs, there is no browsing history to retain.
6. International transfers
Where personal data is processed outside the UK (e.g. by a payment processor), we rely on an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
7. Your rights
Under UK GDPR you have the right to: access your data, rectify inaccuracies, request erasure, restrict or object to processing, data portability, and to withdraw consent at any time. You can exercise these in-app (Profile → Privacy) or by emailing [email protected]. We respond within one month.
8. Automated decision-making
We do not use solely automated decision-making that produces legal or similarly significant effects about you.
9. Children
The Service is not directed at children under 16, and we do not knowingly collect their data.
10. Security
We use encryption in transit and at rest, hashed passwords, field-level encryption for sensitive fields, access controls, and continuous integrity monitoring of our systems.
11. Complaints
If you are unhappy with how we handle your data, you may complain to the UK Information Commissioner's Office (ICO), ico.org.uk — but we'd appreciate the chance to resolve it first via [email protected].
12. Changes
We publish every version of this policy with an effective date and change log. Material changes are notified in-app or by email.