Privacy Policy

Last updated: October 16, 2026

Template. Replace the details in [square brackets] and make sure this text matches how your service actually works.

1. Who we are

Morph VPN is operated by [Legal name of the business], [Registered address] (“we”, “us”). We are the controller of the personal data described in this policy. Contact: [email protected].

2. Our no-logs principle

We do not log your browsing history, the websites or services you connect to, DNS queries, or the content of your traffic. We do not link your VPN activity to your identity or IP address.

3. Data we process

• Order data: order number, chosen plan, price, date, payment status, and the email address you give at checkout — to deliver your subscription, answer support requests and meet accounting obligations.
• Payment data: payments are processed by Whop. We receive confirmation that a payment succeeded and your checkout email, but never your full card number.
• Technical data needed to run the service: the number of devices connected at the same time may be processed in real time to enforce the device limit. It is not stored as a history.
• Website: our web server does not keep access logs with visitor IP addresses. IP addresses may be processed briefly in memory to protect the site from abuse (rate limiting).

4. Legal bases

We process order data to perform our contract with you, to comply with legal obligations (for example, accounting), and on the basis of our legitimate interest in keeping the service secure.

5. Who we share data with

We do not sell personal data or use it for advertising. We share it only with providers we need to run the service: Whop (payment processing), our hosting provider, and — if enabled — an email delivery provider that sends your order confirmation. We may disclose data where required by law, but because we keep no activity logs, we have no records of your online activity to disclose.

6. Retention

We keep order data for the duration of your subscription and up to 12 months after it ends, or longer only where accounting law requires it. Then it is deleted.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to complain to a data protection authority. To exercise these rights, email [email protected]. We respond within 30 days.

8. Cookies and local storage

We do not use advertising or analytics cookies. Your browser’s local storage keeps only your language preference and the number of your last order, so you can return to your link via “My access”.

9. International transfers

Our providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

10. Children

The Service is not intended for people under 18, and we do not knowingly collect their data.

11. Changes

We will publish any changes to this policy on this page with a new date.