Privacy and data use
SwiftSurf
Updated
VPN service data
SwiftSurf uses your email, account and device identifiers, device platform and client version to authenticate you and enforce device limits. Selected region, protocol, connection times, lease status and traffic counters support connections, time accounting, diagnostics and service security. VPN nodes process the network traffic you send.
Purchases and verification
Apple or Google processes purchases made through its respective app store. Where website checkout is offered, the payment provider named at checkout, such as Stripe, processes payment. SwiftSurf receives transaction and product identifiers, amount, currency and account-bound verification results to deliver passes and handle refunds; it does not receive your full payment-card details. Sign-in verification uses Cloudflare Turnstile, which processes IP addresses and related browser/network signals and may infer a country or region for fraud prevention. These providers apply their own privacy terms.
How data is used
We do not sell VPN data or use it for advertising or cross-app tracking. Service data is used only to provide and protect the service, fulfill transactions and respond to your requests. Do not include sensitive information in device names or diagnostic feedback.
My Servers
Imported configurations and server passwords are stored on this device in application storage protected by platform security, including Android Keystore or Apple Keychain where used. The VPN service performs necessary protocol authentication with your selected server. On Android, choosing Quad9 DNS sends personal-server DNS requests to Quad9. If encrypted DNS is selected, those requests use HTTPS through the VPN tunnel. Your server operator and DNS provider process the traffic or queries needed to deliver their services.
Account and deletion
In the app, open Account → Account and security → Delete account. You can also request deletion without the app using the account-deletion page linked above. Deletion revokes device sign-ins and removes your account email, password and device names. Purchased passes become inaccessible. Transaction, refund and necessary security audit records are retained for applicable obligations. Remove local personal-server configurations separately on the My Servers page.
Your choices
If you disagree, close the app; it will not sign in, purchase or establish a VPN. You can disconnect at any time and remove SwiftSurf configurations in system VPN settings. You can always view this disclosure under About SwiftSurf.
Retention and requests
Account information is kept while the account exists. Account deletion removes the account email, password and device names. Immutable transaction, refund and necessary security audit records are retained for applicable obligations and used only for those obligations, security and dispute resolution. Contact contact@swiftsurf.io about access, correction, deletion, withdrawal of consent or retention periods.
International processing
Service infrastructure may be outside your country or region; processing remains limited to the purposes described in this policy.
Website analytics
The official website uses Google Analytics to understand visits, referral platforms, page activity and counts of registrations, checkout starts and confirmed payments. Google may process browser/device signals and approximate location using analytics cookies. We do not send account emails, account or order identifiers, payment amounts or AI conversation URLs in these conversion events. Browser storage links a recognized AI source to activity within a 30-minute inactivity window and prevents repeated payment counts on this browser; stored order digests remain on the device. You can manage cookies and site storage in your browser. These website statistics do not measure the content of your VPN traffic.