1. Scope and who we are
This policy explains how SakuraCat and this website handle personal information. SakuraCat is operated by MeowSec Tech LLC ('we', 'us').
It covers what happens when you browse this website, click through to sign up or download an app, and use a SakuraCat account. It does not replace any consent that the law requires us to request separately.
2. Information from website visits
When you visit this site our hosting provider and analytics tools process technical data such as your IP address, the pages you open, the time of the request, your browser and device type, the language setting, the page that referred you and the links you click.
Your language choice may be saved in your browser's local storage so we can show the site in the same language next time. Clear your browser data to remove it. We do not use this information to build advertising profiles, and we do not send page text to third-party translation services.
3. Information for account holders
If you create a SakuraCat account or subscribe to a plan, the service handles the information needed to run it:
- registration and sign-in: email address, password hash and verification codes
- account and subscription records: plan, expiry, data allowance and usage, subscription tokens
- orders and payments: order details, payment status and balances
- operations and security: connection times, source IPs, client versions, error logs and unusual-activity signals
- support: tickets, messages and any attachments or logs you choose to send
Destination addresses, domains or ports may be recorded only while troubleshooting a specific problem or investigating a security incident, so we do not promise a service that is free of logs in every circumstance. We do not sell personal information and we do not use browsing content for advertising.
4. Why we use information
We use information to operate the website and the service, measure usage, authenticate accounts, process orders, answer support requests, keep systems secure, prevent abuse and meet legal duties. Analytics help us understand which pages are useful so that we can improve them.
Where the law requires your consent for optional processing we ask for it first, and you can withdraw it afterwards without affecting earlier lawful processing.
5. Who receives information
The table shows the main recipients. Third parties may keep the requests they receive under their own policies, and providers acting for us are asked to limit their use of data and protect it appropriately.
| Recipient | Purpose | Information involved |
|---|---|---|
| Cloudflare | Website hosting, delivery and network security | IP address, request path and time, browser and connection details |
| Rybbit | Aggregate website analytics | Page views, referrer, device and browser type, approximate location derived from the IP address |
| OpenPanel | Website analytics and outbound-link measurement | Page views, clicks on outgoing links and technical browser data |
| Our partner sites | Where sign-up, checkout and downloads take place after you click a link | Whatever you enter there; their own privacy policy applies |
| MeowSec Tech LLC | Operator of SakuraCat accounts, nodes and support | Account, subscription, usage and support information described in section 3 |
We may disclose information when a court, regulator or other competent authority makes a valid legal request, and we limit the disclosure to what the law requires.
6. Cookies and local storage
This site uses a small amount of local storage for your language preference and may set first-party identifiers used by its analytics tools to count visits. It does not run advertising trackers. Partner sites you visit after clicking a link use their own cookies and tools.
7. How long we keep data
We keep information only as long as needed for the purpose it was collected and as the law requires. Website analytics are kept in aggregated or time-limited form. Account, order and financial records are kept while the account is active and for the period the law or dispute resolution needs afterwards; operational and security logs are kept as long as an investigation requires.
After an account is deleted, data that is no longer needed is deleted or irreversibly anonymised. Copies in backups are cleared on a rotating schedule and, until then, are restricted from ordinary use.
8. Security
Account and subscription connections use TLS, sign-in tokens are protected, and access to systems that hold personal information is limited to authorised staff with a genuine need. No method is perfectly secure; if an incident affects you we will investigate, fix it and notify you and the authorities where the law requires.
A VPN protects the path between your device and the node, but it is not end-to-end encryption for every request, so choose secure (HTTPS) services and keep your devices, passwords and subscription links private.
9. Your choices and rights
Depending on where you live you may have the right to access your information, correct it, receive a copy, restrict or object to processing, withdraw consent, and ask for deletion. You can view account, plan and usage information in your account and change your password there.
To delete an account, use the deletion option in your account or the app and confirm it. Requests are processed on a daily schedule, so deletion is not instant; signing in again before it completes cancels the request. Legally required records are kept for the period the law demands, as described in section 7.
We normally answer verified requests within 30 days, or sooner where required, and we will explain any extension, refusal or record we must retain. Verification never requires your password. You may also complain to your local data-protection authority, and we will not treat you worse for using your rights.
10. Children
The service is not directed to children under 13 or the higher minimum age set by local law. Older minors should obtain guardian permission where required. If you believe we hold a child's information without the required conditions, contact us and we will look into it and delete it where appropriate.
11. International processing
Nodes, hosting and service providers can be located in other countries, so information may be processed outside where you live. A node's country does not tell you where account data is stored. Where the law requires, we rely on appropriate safeguards and notices for cross-border processing.
12. Updates and contact
We will publish changes to this policy on this page with the date, and explain material changes to purposes, data types, recipients or rights through appropriate notices. Continued use does not authorise new optional processing that requires fresh consent.
Questions or privacy requests? Use the help center and mention "privacy request" together with whether you want access, correction or deletion. Please never send passwords, verification codes or complete subscription links. Entity responsible: MeowSec Tech LLC. Website: sacuracatvpn.world.