Privacy policy
What we collect, why we collect it and how long we keep it.
In short
We serve pages without page-view analytics scripts, advertising pixels or third-party font requests. We count clicks on our provider redirect links. We do not store IP addresses in the click database. Raw click records have a 90-day retention window, with daily cleanup and long-term daily summary counts.
Who operates the site
VPN Brief, United States. Business mailing address: 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Privacy requests can be sent by post, marked Privacy request. Domain email is not yet available.
Reading the site
Cloudflare hosts and protects the site. It processes connection information, including IP addresses, to deliver requests and provide security. Cloudflare’s own privacy policy (non-affiliate source) describes its practices. We have not enabled Google Analytics, advertising pixels or a page-view analytics script.
Clicking a provider link
Links under /go/ and our short provider links pass through our redirect handler. It records a random click identifier, timestamp, provider identifier, page path or supplied page label, button position, source label, same-site referrer path, approximate country, device class and a bot indicator. The country comes from the host’s request metadata. Device class and the bot indicator are derived from request headers.
We do not save your IP address, full user-agent string, external referring address or referring URL query string in this database. No click identifier is sent to the current non-affiliate destination URLs. If we later configure a supported affiliate sub-ID, the policy will be updated before it is enabled.
Retention and daily totals
A daily scheduled job summarizes completed days. Raw records older than the 90-day UTC window are removed only after their eligible counts are archived successfully. Daily scheduling and UTC day boundaries can add up to one day before removal. Summaries retain the day, provider, page, position, source, country, device class and count. They contain no click identifier or exact event time and are kept for historical reporting. We do not describe these grouped counts as guaranteed anonymous, because a small group can still carry context.
Known bots, link previews, HEAD requests and browser prefetches are excluded from eligible click totals. Detection is approximate; the reports count outbound clicks, not people or verified purchases. Cloudflare D1 may retain recovery copies under its platform recovery policy after a record is removed from the active database.
Contact information
There is no message-submission endpoint or active message form. Information you send by post is used to handle your request and kept for as long as needed to resolve it and meet applicable obligations. Please do not include passwords or payment information.
After you leave the site
The provider’s terms and privacy policy apply on its website. It may use cookies or collect information independently of VPN Brief. We do not receive your VPN browsing activity or payment details through the current website links.
Cookies
VPN Brief does not set advertising or analytics cookies. Menu state is temporary in the browser. Where an exit reminder is enabled, a timestamp in local storage limits it to once per seven days. That timestamp remains until replaced or cleared in your browser. Session storage suppresses the reminder after a provider-link click for that browser session. These preferences are not sent to the click database. Cloudflare may use security cookies where its protection requires them. Private dashboard authentication, once configured, may also use authentication cookies.
Access and protection
Click records are held in Cloudflare D1. Public visitors cannot read the reporting endpoint. Dashboard access stays disabled until owner authentication is configured. Hosting and database account access is restricted to authorized operators.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete or restrict use of personal information and to complain to a relevant authority. Send a request to the postal address above. Because we do not store an IP address in the click database, we may be unable to identify a particular record without additional information. We do not use the click data for targeted advertising or sell it.
Changes
This policy describes the current setup. We will update it when data handling changes and obtain consent where required.