Last updated: 3 August 2026
Privacy Policy
This policy explains what data Kola VPN processes, why, and how we protect it. In short: we enforce a strict no-logs browsing policy and collect only the data needed to run your account and subscription.
1. Data controller
The data controller is LTC GROUP SARL, publisher of the Kola VPN service. For any question about your personal data, contact us at privacy@kolavpn.site.
2. Data we collect
We collect only the data needed to provide the service: (a) account data you give us -- phone number and/or email address, password (stored only as an Argon2id hash) and, where applicable, name and country; (b) subscription and billing data -- chosen plan, status and payment references; (c) device data -- platform, OS and app version, hardware identifier (hashed on the device, never the raw fingerprint) and, for account-sharing detection, a two-letter country code of the last activity; (d) aggregated data volume -- total bytes transferred, bucketed per hour per subscription, to enforce quotas and the fair-use policy. Your IP address is never stored in clear: it is immediately replaced by a salted, rotating hash used solely against abuse. We do not collect or log the contents of your traffic, the sites you visit, domains, DNS queries, destinations, or the timing of your individual connections.
3. Purposes of processing
This data is used solely to: authenticate you and secure your account; provision and revoke your VPN access; manage your subscription and payments; enforce your plan's device limit and the fair-use policy; detect account sharing; ensure security and prevent abuse; and provide support. None of this data is used for advertising, tracking or profiling.
4. No-logs browsing policy
Kola VPN enforces a strict no-logs policy: our infrastructure does not inspect, record or retain the contents of your traffic, the sites or domains you visit, DNS queries, destination addresses, or the precise timing of your individual connections. Only the total volume of data transferred is measured, in aggregate, to enforce your quota. Because we do not hold this information, we are technically unable to provide it to any third party.
5. Legal basis
We process your data on the following bases: performance of our contract with you (account, subscription, billing); our legitimate interest in securing the service and preventing fraud and account sharing; compliance with our legal and accounting obligations; and your consent where required.
6. Sharing with third parties
We do not sell or rent your data, and we do not share it with any data broker or advertiser. Your VPN traffic is never shared -- we do not hold it. Only the strictly necessary account and billing data is passed to our processors: payment providers (Mobile Money aggregators and Stripe) to process the payments you initiate, and our VPN access-management panel (Remnawave), hosted on our own infrastructure, to provision your access. These providers act as data processors, for the sole purpose of delivering the service.
7. Retention period
Account data is kept while your account is active. On closure it is soft-deleted and retained only for as long as our legal and accounting obligations require, then removed. Aggregated data volume is kept for the relevant quota period. IP address hashes are ephemeral and rotating.
8. Data security
We protect your data with encrypted communications (HTTPS with certificate pinning), password hashing (Argon2id), hashing of hardware identifiers and IP addresses, session-token rotation, and a signed, short-lived access configuration. Access to systems is restricted and logged.
9. Your rights
Under applicable law, you have the right to access, rectify, erase, port, object to and restrict the processing of your data. To exercise these rights, write to privacy@kolavpn.site; we respond within the legal time limits.
10. Cookies
The website uses only cookies strictly necessary for its operation (for example, remembering your language). We do not use advertising cookies or third-party trackers.
11. Contact
For any question about this policy or your personal data: LTC GROUP SARL -- privacy@kolavpn.site.