Privacy Policy

1. Information We Collect

Totoro Cloud collects only the minimum information required to provide our service. This includes your email address for account creation and billing information when you upgrade to a paid plan. We do not collect traffic logs, DNS queries, IP addresses, or any browsing history.

2. How We Use Your Information

We use your email address to send account-related communications (purchase confirmations, renewal reminders, and security notices). We use billing information solely to process payments. We never sell or share your personal data with third parties for marketing purposes.

3. Zero-Log VPN Policy

Totoro Cloud operates a strict zero-log policy. We do not log: VPN connection timestamps, assigned IP addresses, traffic destinations, DNS queries, or bandwidth usage per user. This means even if compelled by a legal order, we have no data to share about your online activities.

4. Data Retention

Account data is retained for the duration of your subscription plus 30 days after cancellation, after which it is permanently deleted. Billing records are retained as required by applicable accounting laws.

5. Security

All data transmissions use TLS 1.3 encryption. Passwords are hashed using bcrypt. We conduct regular security audits and do not store sensitive payment card data — payments are processed by PCI-compliant third-party providers.

6. Cookies

Our website uses only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting support@totorocloudvpn.com. We will respond within 30 days.

8. Changes to This Policy

We will notify registered users by email at least 14 days before any material changes to this policy take effect.

9. Contact

Privacy questions: privacy@totorocloudvpn.com