This policy outlines how Casper VPN handles your personal information in the capacity of a data controller for our services.

Policy Framework

At Casper VPN, we prioritize your anonymity above all else. Our core principle is maintaining:

• Zero activity logs

• Minimal data collection

• No metadata storage

We do not store user activity to safeguard your privacy. However, certain circumstances may require the processing of personal data, such as:

• Payment transactions through banking systems, PayPal, Swish, Stripe, or similar services

• Customer communications via email or technical support requests

We reserve the right to terminate service access and revoke license keys for users engaging in illegal activities.

Financial Data Retention

• Payment-related information is retained according to statutory requirements defined by relevant local laws.

• Unless legally required or stated elsewhere in this policy, data is stored only for the minimum necessary durationfor operational needs.

• After the statutory retention period ends, all payment data is permanently deleted.

Payment Processing

We process payment data to:

• Deliver Casper VPN services

• Handle refund requests

• Maintain accounting records

This data is processed based on:

• Legitimate business interests, which take precedence over individual data rights for service delivery and refund handling

• Legal obligations, especially for accounting and financial compliance

Note: We strongly discourage wire transfer payments due to their privacy limitations.

Customer Support & Technical Reports

Email Support

When contacting our support team, we collect:

• Your email address or any other selected contact informatiom

• The content of your correspondence

In-App Problem Reports

Our applications may collect program logs, but:

• Email addresses, IPs, and sensitive file paths are automatically removed for privacy.

• We recommend avoiding personal data in reports submitted through the app.

Support communications via email or social media are used to:

• Resolve technical issues

• Address customer inquiries

• Provide user support

This processing is based on legitimate interests where operational requirements override individual data rights.

After resolving support cases:

• Correspondence is archived, not kept in active inboxes

• An automated system permanently deletes all support data after six months, including from inboxes, sent folders, trash, and archives

External Data Sharing

We do not sell or rent your personal data. Sharing occurs only with trusted third-party service providers for the purposes outlined above.
These include:

• Payment processors

All third parties are bound by strict confidentiality agreements.

Application Monitoring

Casper VPN uses Sentry, provided by Functional Software, Inc., to:

• Monitor application performance

• Enhance operational efficiency

• Support maintenance and troubleshooting

The type of personal data processed by Sentry depends on service configuration and implementation, focusing on usage analysis and performance metrics.

International Data Transfers

All personal data is stored exclusively within EU/EEA jurisdictions.
If data must be transferred to a third country under exceptional circumstances, we will:

• Establish a valid legal basis

• Provide you with clear notification

Automated Processing

Casper VPN does not use:

• Automated decision-making, or

• Profiling technologies

Age Requirements

In compliance with the Children’s Online Privacy Protection Act (COPPA) and related laws:

• Casper VPN is not intended for individuals under the age of 13

• We do not knowingly collect or retain personal information from children under 13

Policy Revisions

This Privacy Policy was last updated on July 12, 2025.
Any future changes will result in a new version being published on the Casper VPN website.