Who we are
Vanta VPN (“Vanta”, “we”) is a decentralized private-internet protocol. The website and app are the control plane: sign-in, city directory, quotes, and settlement. Independent operators run the cities you connect through. This policy describes what Vanta itself processes. It is written for people, including people in the EU/UK (GDPR).
What we collect
- Account. An email or social login, or a wallet address on Robinhood Chain, so we can recognize you.
- Session receipt. City you chose, gigabytes purchased, amount paid, and that a payment landed (transaction hash). Enough to open the location and show a receipt.
- Invites. Your invite code, clicks, sign-ups, and thank-you credit — stored so we can apply welcome data.
- Device storage. Sign-in cookies from our login provider, and local storage on your device for connections and leftover credit.
We do not store your WireGuard private key. That key is created in your browser and stays there. We never ask for a copy of the websites and apps inside your tunnel.
What we do not see
After you import the setup file, packets travel device ↔ chosen location. Vanta is not in that data path. We cannot read the encrypted tunnel. Independent locations are exits you choose; they can see traffic leaving that city the same way any VPN exit can. Pick cities you are willing to exit from.
Payments
You pay in ETH or USDG on Robinhood Chain. That payment is a public blockchain transfer to Vanta’s payment wallet. The chain is a receipt, not the tunnel. Blockchain records are public by design; we do not control that ledger.
Cookies and similar storage
Essential storage is required for the product: sign-in, remembering your connections on this device, and applying invite credit. The banner on this site lets you accept essential use or all cookies. We do not run advertising trackers. If we add optional analytics later, they stay off until you choose Accept all.
Legal bases (GDPR)
- Contract — providing the connection you paid for.
- Legitimate interests — keeping the directory honest, preventing payment replay, and securing the control plane.
- Consent — optional cookies, when you tap Accept all.
Your rights
If GDPR or UK GDPR applies, you can ask for access, correction, deletion, restriction, portability, or to object. You can also withdraw cookie consent. Write to hello@vantavpn.xyz. You may complain to your local data protection authority.
Retention
Payment receipts and session records are kept as long as needed to prove a purchase and reopen a setup file, then deleted or minimized. Local storage lives on your device until you clear it.
Children
Vanta VPN is not directed at children under 16. Do not create an account if you are younger than that.
Changes
If this policy changes in a material way, we will update the date above. Continued use after that date means you have read the new version.