01 Information We Collect
We collect the minimum needed to run your account, deliver your configuration and provide support:
- Email address — identifies your account and is where we send sign-in codes, order updates and your configuration.
- Sign-in credentials — you can sign in with a password or with a one-time 6-digit code sent to your email. Passwords are stored only as a one-way hash (bcrypt). Sign-in and verification codes are stored only as a keyed hash, expire after 5 minutes and stop working after 5 wrong attempts. If you sign in with Google (where this option is offered), we receive your Google account email address and Google account ID.
- Account security logs — each time you register or sign in we record the IP address, the browser user agent and the time. These logs protect your account (you can review them in your dashboard) and are separate from VPN traffic: they are created on our website, not on the VPN servers.
- Orders and plan data — the plan, duration and extras you buy, the device label you enter, order and activation dates, renewals and traffic top-ups.
- Payment records — the payment and invoice IDs issued by our payment processor, the amounts and currencies, the deposit address generated for that payment and its status. See section 4.
- VPN account data — your VPN username, data allowance, data used, expiry date, subscription link and the last time your VPN client was online are stored on our VPN management panel, so we can enforce your plan and show usage on your dashboard.
- Support communications — the tickets, messages and any images you send us.
- Referral data — your referral code, the account that referred you (if any) and earned referral commission.
- Telegram bot data— if you use our Telegram bot (@rapidpingbot), we store your Telegram user ID and chat ID linked to your RapidPing email, plus short-lived bot state (for example the plan you are choosing). If you use the bot's AI support assistant, your messages and its replies are stored with a conversation ID and sent to an AI support service operated by RapidPing to generate answers.
We do not require your name, address, or any government-issued ID to create an account or purchase a plan.
02What We Don't Collect
To be specific about the boundary, we do not keep VPN traffic or activity logs, and we do not collect:
- Your browsing history or the destinations you connect to
- DNS requests
- The content of your traffic or messages
- Contacts, photos, or files (other than images you attach to a support ticket)
- Precise location data
- Payment card details — we do not accept or store cards
03 How We Use It
We use the information above only to:
- Deliver and activate your VPN configuration
- Let you sign in and manage your plan from your dashboard or the Telegram bot
- Track data usage against your plan's limit
- Send the emails the service needs: sign-in and verification codes, password-reset codes, order and payment updates, and subscription delivery
- Respond to support requests
- Protect accounts and the service — rate limits, bot checks (section 6) and the security logs above
- Understand how the website is used (section 7)
- Meet legal obligations where applicable
We do not sell or rent your personal information, and we do not use it for advertising.
04 Cryptocurrency Payments
All payments are made in cryptocurrency and are processed by NOWPayments, which creates the invoice and deposit address and tells us when a payment is confirmed. We receive and store the payment and invoice IDs, amounts, currencies, the deposit address and the payment status, so we can match the payment to your order. NOWPayments processes the payment under its own privacy policy.
Blockchain transactions are public by nature: anyone can look up a transaction on the relevant network, independent of anything RapidPing does or stores.
05 Data Retention
We do not use traffic or browsing logs to monitor or profile your online activity. Other data is kept only as long as it's needed:
- Sign-in and verification codes: expire after 5 minutes and cannot be used again.
- Account security logs: [TODO: retention period for login IP/user-agent logs]
- Account, order and VPN account data: [TODO: retention period, and what happens to inactive accounts]
- Support tickets and Telegram AI support conversations: [TODO: retention period]
- Invoices and payment records: as required by applicable law [TODO: confirm period]
06 Cloudflare and Bot Protection
The website is served through Cloudflare, which handles the connection between your browser and our servers and may process your IP address and request data to deliver and secure the site.
On the sign-in, sign-up, password-reset, purchase, renewal and traffic top-up forms we use Cloudflare Turnstile to tell people from automated bots. Turnstile runs a check in your browser that may use your IP address and browser and device signals; we only receive a pass/fail result. See Cloudflare's privacy policy and the Turnstile privacy addendum.
08Service Providers & Third-Party Apps
Besides the providers named above (NOWPayments, Cloudflare, Google Analytics and Ahrefs), we rely on an email provider to deliver our emails, on Telegram when you use our bot (see Telegram's privacy policy), and on Google if you choose Google sign-in. Telegram support assistant answers are generated by an AI support service operated by RapidPing.
RapidPing configurations are designed to work with third-party client apps (such as v2rayNG, Nekoray, Hiddify, Shadowrocket, Clash, Sing-box, and WireGuard). Those apps are developed and maintained independently, and we do not control how they collect or process data. They have their own privacy practices, which we encourage you to review.
09 Data Security
We use HTTPS/TLS encryption in transit, store passwords and one-time codes only as hashes, limit repeated sign-in and code attempts, and restrict account data to authorized personnel. Collecting as little as we do also keeps the amount of data that could ever be exposed small. No method of transmission or storage is perfectly secure, but this is how we approach it.
10 Your Rights
Depending on where you live, you may have the right to:
- Access — request a copy of the data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — ask us to delete your account and associated data
To make a request, contact us using the details below. We'll respond to verified privacy requests within a reasonable time and as required by applicable law.
11 Legal Basis for Processing
Where applicable law requires it (such as under the GDPR), we process your information on one of these bases: performance of a contract (delivering your plan and configuration), compliance with a legal obligation, or our legitimate interest in operating, securing and understanding the use of the service.
12Children's Privacy
RapidPing is not intended for anyone under [TODO: minimum age — this page said 13 and the Terms of Service said 18], and we do not knowingly collect information from them.
13 International Data Transfers
Your information may be processed in different countries where our infrastructure or service providers operate. We take reasonable contractual and technical measures to protect your data when it's processed outside your country.
14 Changes to This Policy
If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you by email.
15 Contact Us
Questions about this policy or your data can be sent to our support team.
Support: Submit a ticket through our support system.
Privacy contact: [TODO: privacy contact email and postal address]
Our support team is available to help with account-specific questions and issues through the ticketing system.