Privacy Policy

This policy explains how VPNKING (worldvpnking.com, "we" or "us") collects, processes, uses and protects your personal data. It applies to this website and our VPN service.

Third-party services you go to from this website (such as ECPay's payment page and LINE) handle your data under their own privacy policies, which this policy doesn't cover.

• Account data: your email address (for sign-in and notifications), your password (we store only a bcrypt hash, so we can't see your password), and the name and phone number you choose to give us (optional).
• Transaction data: order number, plan, amount, payment method and status, ECPay transaction number, and payment details such as an ATM virtual account number or convenience store payment code. Your card number is handled by ECPay; we never receive or store it.
• Service data: your subscription period, the connection credentials our system generates (identifiers and keys), server sync status, and upload/download data totals for each account.
• Technical data: your IP address when you sign up and sign in, browser and device information (User-Agent), cookies, and attempt counts we record to prevent abuse.
• Support conversations: what you send us when you contact us through LINE or email.

• We don't inspect or store the content you send through the service (such as the web pages you visit or your messages).
• We don't sell or rent your personal data.
• This website currently doesn't use third-party advertising or tracking cookies.

You can use VPNKING without creating an account: the first time you open the app, it sets up an account for this device with a daily allowance of free connection time. To provide the service, we process the data listed below. Please read it before you start.

What we process

• Device identifier: a random code generated when the app is installed and stored on this device (it stays even if you delete and reinstall the app). It identifies this device and manages this device’s account and daily free-time allowance.
• Apple DeviceCheck: used only to prevent the free allowance from being obtained more than once. Apple doesn’t reveal this device’s identity to us, and we can’t see its serial number or other device details.
• Device type and app version: used to manage active devices and fix compatibility issues.
• IP address: used to prevent abuse and keep accounts secure (for example, limiting how many accounts one network can create in a short time), never to track you.
• Purchase records: in-app purchases are handled by Apple. We receive only the transaction record signed by Apple (transaction identifier, plan and time of purchase) and never your payment details.
• Free-time usage: the start and end time of each free connection, used only to calculate your daily free allowance.
• Data usage: total upload and download per account, as totals only, used to maintain service quality.
• Diagnostic log: stays on this device and leaves it only if you export it. Emails, account credentials and URLs are removed before export.
• Email: linked to this device only if you enter an activation code to link a website member account. The app shows only a masked version of that email.
• When you create an account or sign in: your email address and password (stored only as a hash), used to identify your membership, sync your plan on up to 3 devices, and send verification codes and account notices.

What we don’t collect

• Your browsing history or the content of your connections.

No selling and no sharing with third parties

• The app has no built-in third-party analytics, advertising or crash-reporting tools. Your data is never sold or provided to third parties for their own use. Only service providers necessary to deliver the service handle it (cloud security/network provider, website payment processor); the cloud security/network provider only protects data sent between the app or website and our servers and doesn’t handle the content of your VPN connection.

Delete anytime

• On the Account page, choose Delete This Device’s Data to delete this device’s account and connection credentials. This can’t be undone. To prevent the free allowance from being obtained again, this device’s free-time usage record is kept. If this device is linked to a website member account, it is unlinked and its own device account is deleted; the member account isn’t affected. Transaction records that must be kept by law are retained until the required period ends.

1. To create and manage your member account, verify your email and keep sign-in secure;
2. To process orders, payments, activation, refunds and reconciliation;
3. To provide the VPN service, measure usage and prevent abuse (such as detecting unusual activity and limiting attempts);
4. To send activation notices, expiry reminders and important service announcements;
5. To provide customer and technical support;
6. To keep records as required by law, or to respond to lawful requests from the authorities.

• Retention: for as long as your account exists. After your account is deleted, transaction and payment records are kept until the retention period required by tax, accounting and other laws ends; service data such as data usage totals is kept only as long as needed to provide the service and handle disputes.
• Location: your data is stored on our servers in Taiwan. The website uses Cloudflare for delivery and protection, so data may pass through its network.
• Recipients: us, and the service providers needed to run the service: ECPay (payment processing) and Cloudflare (website delivery and protection). We don't provide your data to any other third party unless the law requires it or you agree.
• Methods: processed and used automatically or manually, within the purposes above.

This website uses only the cookies needed to keep you signed in:

• wvk_session: your sign-in session (HttpOnly, so page scripts can't read it). Valid for 30 days and cleared when you sign out.
• wvk_li: a hint that lets pages show the "My subscription" and "Sign out" buttons. It contains no personal data and is valid for 30 days.

You can delete cookies in your browser; after that you'll need to sign in again.

The website uses HTTPS encryption throughout. Passwords are stored as bcrypt hashes, sign-in sessions are stored only as hashes, actions such as signing in and sending verification codes are rate limited, and the admin back office can be reached only from our internal network.

No system can guarantee absolute security. If a personal data breach occurs, we'll notify you as required by law and take remedial action immediately.

Under Article 3 of Taiwan's Personal Data Protection Act, you may ask us to:

1. let you check or review your data;
2. give you copies of it;
3. add to or correct it;
4. stop collecting, processing or using it;
5. delete it.

Email us from your registered address or contact LINE support, and we'll handle your request after verifying your identity. If you delete your account or ask us to stop processing data we need, we may no longer be able to provide the service. Transaction records we're required by law to keep are deleted after the retention period ends.

If you're under 18, you need your legal guardian's consent before you sign up for or use the service.

We may update this policy because of legal or service changes. Updates are posted on this page with a new "Last updated" date, and significant changes are also announced on the website or sent by email. Please also see our Terms of Service.

If you have any questions about this document or want to exercise your rights, contact us:

• LINE official account: @924ytgos (support hours 09:00–20:00 (Taiwan time, UTC+8))
• Email: support@worldvpnking.com
• Facebook page: facebook.com/worldvpnking

Our team works mainly in Traditional Chinese; you're welcome to write in English.