Privacy Policy

What we collect

Account: your sign-in email, customer number and a hashed password.

Orders and payments: the plan, amount, payment method and the reference used to reconcile it. An Alipay red-packet code is used only by support to claim and verify the payment and is stored encrypted; card and Alipay online payments are handled by Stripe and we never see or store card numbers.

USDT payments: to verify receipt, we read the transaction ID, sending and receiving addresses, amount and time from the TRON blockchain, and associate a matched transaction with its order. We do not store your wallet private keys or recovery phrase.

Service usage: subscription expiry, data allowance and usage totals by account, node and time period, for billing, quota control and troubleshooting.

Concurrent IP count: nodes count how many different IP addresses are connected to each account at the same time. Only the number is kept (a daily maximum per account), to understand usage. The IP addresses themselves are never written to disk, logs or a database.

Connection setup: we save the steps you confirm, their first completion times, device category and client choice to resume setup and summarize activation and purchase conversion. A usable connection is your confirmation, not an automatic network test. This tracking adds no IP addresses, browsing destinations or subscription links. A guest plan selection and currency are kept temporarily in the current browser tab and expire after 30 minutes.

What you give us: support tickets, the Alipay receiving account you provide for a red-packet refund, the transaction ID and receiving address you provide for a USDT refund, invitation links and redemption records.

Telegram linking: if you choose to link the bot, we record your Telegram user ID, username and link to your Aurel account to identify the account and process redemptions.

Security records: short-lived sign-in attempt counters that protect against password guessing (stored as hashes); the signed-in devices list keeps the first three parts of the IP (e.g. 203.0.113.x), deleted at sign-out or after at most 7 days.

What we do not collect

We do not log the websites you visit or store the content you send. Nodes keep data usage totals and a small rotating warning log for troubleshooting.

The site uses no advertising or third-party tracking. Cookies only keep you signed in and remember your language.

Protocol identification and abuse prevention

To enforce prohibited-use rules, nodes identify protocol characteristics during a connection to block identifiable BitTorrent traffic. This transient identification does not create a browsing history or retain transmitted content. Encrypted or obfuscated traffic may not be identified.

How we use it

To provide and maintain your service, reconcile payments, calculate data and levels, answer support requests, send necessary account emails (such as verification codes) and prevent abuse. We do not use your information for advertising.

Who we share it with

We do not sell or rent personal information. We rely on these providers only where the service needs them: Cloudflare (website hosting and DNS), server providers (running the nodes), Stripe (card and Alipay online payments) and an email service (verification codes). Each receives only what its task requires.

When you use the Telegram bot, messages are processed through Telegram. We use TronGrid to read public blockchain records when checking USDT payments. Blockchain transfers are publicly visible.

We disclose information to others only where the law compels us to.

Retention and deletion

Account information is kept while your account exists; order and payment records are kept as accounting law requires. You can delete your account completely at any time in the customer centre under Settings (confirmed with an e-mail code), or ask us through a support ticket or by email. Personal data, sign-in and the VPN account are then removed; orders and payments keep only the amount, date and payment method, anonymously; a keyed hash of the e-mail is kept to enforce one free trial per address; encrypted backups stop containing the account after at most 60 days. The per-account hourly usage breakdown is kept for at most 90 days. Server system logs are kept for at most 7 days. See the Transparency page.

Your rights

You can access and correct your information, request a copy or deletion of your data, and withdraw consent. Contact us with any concern; users in the EU may also complain to their local data protection authority.

Security

The site uses HTTPS throughout, passwords are never stored in plain text and the admin console is separately hardened. No system is perfectly secure; if an incident affects your data we will tell you promptly.

Contact

For privacy questions email support@aurel.work or open a support ticket in the customer centre. When this policy changes, the date above is updated.