Last updated: October 2026
This Privacy Policy explains what information VPN Blocker (“we”, “us”, “our”) collects when you use vpnblocker.net, the dashboard and the VPN Blocker API (together, the “Service”), why we collect it, who we share it with, and the choices and rights you have. It should be read together with our Terms of Service.
Summary
- We collect only what we need to run your account, bill you, keep the Service secure and answer your questions.
- We do not keep a record of the individual IP addresses you look up through the API. We count lookups per API key.
- Your card details are handled by Stripe and never reach our servers.
- We do not sell your personal information, and we do not use advertising or tracking cookies.
Information we collect
Account information
When you sign up we collect your email address and a password. Passwords are stored in a protected, one-way form, so we cannot read them. We also record when your email address was verified, your notification settings and when you last signed in.
Billing information
When you add a card, including the card on file required for the Free plan, your card details are collected and stored by our payment processor, Stripe. We receive only limited details from Stripe: the card brand, the last four digits, the expiry date, the card’s country, whether it is a credit, debit or prepaid card, the result of the security code check, and a card fingerprint. We use the fingerprint to stop the same card being used to claim more than one Free plan. We also keep a record of your subscriptions, invoices and payments.
API usage
For each API key we record counts of lookups per day and per month (including how many returned a flagged result and how many were refused at the monthly limit), and when the key was last used. API keys are stored in a protected form; we show you the first few characters so you can tell them apart.
IP reports and support messages
When you report a result as wrong, we store the IP address you reported, the type of report, any note you add, a snapshot of the result at the time, and our reply. When you contact us, we receive your name, email address and message.
Security and technical information
To protect accounts and prevent abuse we record the IP address used to sign up, the IP address and browser (user agent) of each signed-in session, and a log of important account actions such as sign-ins, password changes, key changes and billing changes. Like most websites and APIs, our servers and our network provider keep technical logs of requests, which can include IP addresses, request URLs, browser types and date/time stamps.
Website analytics
We use Cloudflare Web Analytics to see aggregate statistics about page views on the website, such as which pages are visited, referring pages, browser types and countries. It is cookieless: it does not set cookies or use local storage on your device, and we only see totals, not individual visitors.
IP addresses you look up
When you send an IP address to the API, we use it only to produce the result, and we do not keep a record of which IP addresses each customer has looked up. An IP address can still appear in short-lived technical logs used for security and troubleshooting, and IP addresses you choose to report are stored as described above.
If the IP addresses you look up belong to your own visitors or users, you decide why and how they are sent to us, and you are responsible for having a lawful basis to do so and for telling your users, for example in your own privacy policy. For that data we act on your behalf, as a service provider (or “processor”). If you need a data processing agreement, contact us.
How we use your information
- To create and run your account, API keys and subscriptions, and to provide the Service.
- To apply your plan’s monthly limits, show your usage statistics in the dashboard and send you usage alerts.
- To process payments and subscriptions, and to keep records required by tax and accounting law.
- To prevent fraud and abuse, such as multiple Free plans, card fraud, account takeover and attacks on the Service.
- To review IP reports and improve the accuracy of our results.
- To answer your questions and provide support.
- To send you service emails, such as email verification, password resets, billing receipts, usage alerts and important changes to the Service or our terms.
- To comply with the law and protect our rights.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you (running your account and the Service), our legitimate interests (security, fraud prevention, improving the Service and aggregate analytics), and complying with legal obligations (for example keeping billing records).
Emails
We send service emails that are needed to run your account. You can turn usage alerts off on the Account page of the dashboard. If we send marketing emails, each one will include a way to unsubscribe, and unsubscribing will not affect service emails.
Cookies
The marketing website does not set its own cookies. The dashboard uses one strictly necessary cookie to keep you signed in. It is a secure, HTTP-only cookie that expires after 7 days without use, and after 30 days at most. We use Cloudflare Turnstile on the sign-up and contact forms to block spam and bots; it processes technical information about your browser for that purpose only. We do not use advertising or cross-site tracking cookies.
Who we share information with
We do not sell, rent or trade your personal information, and we do not share it for advertising. We share it only with service providers that help us run the Service, under contracts that limit what they can do with it:
- Stripe, for card payments and subscriptions.
- Twilio SendGrid, to send our emails and deliver contact form messages.
- Cloudflare, for website hosting, network security, bot protection (Turnstile) and cookieless web analytics.
- Our cloud hosting providers, which run the servers and databases for the API and dashboard.
We may also disclose information when we believe in good faith that the law requires it, for example to respond to a subpoena, search warrant or other lawful request, or to protect our rights, our customers or the public, and to a buyer or successor if the Service is sold or merged, in which case this policy will continue to apply to your information.
International transfers
Our service providers may process information in countries other than yours, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the Standard Contractual Clauses.
How long we keep information
- Account, API key and usage information is kept while your account is open.
- Signed-in sessions expire after 7 days without use, and after 30 days at most.
- Billing and payment records are kept for as long as tax and accounting law requires, even after your account is closed.
- Security logs and information used to prevent abuse, such as card fingerprints used for Free plan checks, are kept for as long as needed for that purpose.
- Support messages and IP reports are kept for as long as needed to handle them and keep a record of our answers.
When you close your account, we delete or anonymize your information unless we need to keep it for the reasons above.
How we protect your information
All connections to the website, dashboard and API use HTTPS. Passwords, API keys and session tokens are stored in a protected form that cannot be read back, card details stay with Stripe, and access to our systems is limited to the few people who need it to run the Service, who are required to keep it confidential. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a data breach where the law requires.
Your rights
Wherever you live, you can ask us to:
- give you a copy of the personal information we hold about you;
- correct information that is wrong or out of date;
- delete your information and close your account (we may need to keep some records, as described above);
- give you your information in a portable format;
- stop or limit some uses of your information, or object to uses based on our legitimate interests.
To make a request, email us at [email protected] from the email address on your account. We may need to confirm your identity first, and we aim to respond within one month. We will not treat you differently for exercising your rights. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.
California residents: we collect the categories of information described in this policy for the purposes described above. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, and we do not use sensitive personal information to infer characteristics about you.
Children
The Service is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16, or under 13 in the United States as defined by the Children’s Online Privacy Protection Act (COPPA). If you believe a child has given us personal information, contact us and we will delete it.
Third-party links
Our website may link to other websites. Those websites have their own privacy policies, and we are not responsible for their content or practices.
Changes to this policy
We may update this policy to reflect changes to the Service, our practices or the law. When we do, we change the “Last updated” date above, and for significant changes we will make reasonable efforts to notify account holders by email.
Contact us
For questions about this policy or your information, or to make a complaint, email us at [email protected] or use our contact page.