Privacy Policy

1. Who We Are

DoVPN.com is operated by a private individual based in the Netherlands. We provide information about VPN deals and services to help users find the best VPN offers during Black Friday, Cyber Monday, and throughout the year.

Data Controller: DoVPN.com
Location: Netherlands
Contact: privacy@dovpn.com

2. Information We Collect

2.1 Information You Provide

We may collect information you voluntarily provide when you:

• Contact us via email
• Request a checklist or subscribe to DoVPN emails
• Submit feedback or inquiries

This may include your name, email address, consent choice, the checklist or email topic you requested, the page and form where you signed up, campaign parameters, general locale or country information supplied by your browser or network, and subscription or unsubscribe status. We do not send your email address to website analytics.

2.2 Automatically Collected Information

When you visit DoVPN.com, we may automatically collect certain information through cookies and analytics tools:

• Analytics Data: We use Cloudflare Web Analytics and/or Google Analytics to understand how visitors use our site. This includes page views, referring websites, browser type, device type, and general location (country/region level).
• Cookies: We use cookies for analytics and affiliate tracking purposes.
• Log Data: Standard server logs including IP addresses, browser information, and timestamps.

2.3 Affiliate Tracking

When you follow an affiliate link to a VPN provider, the link or destination may use:

• Affiliate network cookies
• URL parameters
• Referral identifiers

This helps DoVPN receive credit for a referral. Affiliate providers or networks may tell us that a click led to a sale and may report commission or order information, but they do not normally give us your identity. VPN providers and affiliate networks apply their own privacy policies to data they collect.

3. How We Use Your Information

We use the collected information for the following purposes:

• Website Operation: To provide, maintain, and improve our website
• Analytics: To understand how visitors use our site and improve user experience
• Communication: To respond to your inquiries and provide customer support
• Requested Email Content: To send a checklist, quiz result, or other resource you requested
• Email Marketing: With your consent, to send occasional VPN buying guidance, privacy tips, provider comparisons, and deal updates
• Email Preferences: To remember your consent, topics, and unsubscribe choice and avoid restarting the same sequence by mistake
• Affiliate Tracking: To track referrals and earn commissions from VPN providers
• Legal Compliance: To comply with legal obligations and protect our rights

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Legitimate Interests: Operating our website, analytics, and affiliate marketing (Article 6(1)(f))
• Consent: To send the DoVPN emails described beside the signup checkbox and to use optional analytics or affiliate cookies (Article 6(1)(a))
• Legal Obligation: When required by law (Article 6(1)(c))

5. Data Sharing and Third Parties

We may share your information with:

5.1 Affiliate Networks

When you click on VPN provider links, you will be redirected to third-party websites operated by:

• NordVPN, Surfshark, PrivadoVPN, ExpressVPN, PureVPN, CyberGhost, Proton VPN, Private Internet Access, IPVanish, TunnelBear
• Their respective affiliate networks

These third parties have their own privacy policies and are responsible for their own data processing practices.

5.2 Analytics Providers

• Cloudflare Web Analytics: Privacy-focused analytics that doesn't use cookies or track personal data
• Google Analytics: Website traffic analysis (if enabled, anonymized IP addresses)

5.3 Service Providers

• Cloudflare: CDN and hosting services
• Resend: Email delivery, contact and topic management, automated sequences, and unsubscribe processing. See Resend's privacy policy and data processing addendum.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure such transfers comply with GDPR through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Service providers certified under relevant frameworks

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Limit how we use your personal data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Every marketing email includes an unsubscribe link. You can also exercise any of these rights by contacting us at privacy@dovpn.com. We will respond within one month.

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Contact Information: Retained for as long as necessary to respond to inquiries, then deleted
• Email Subscribers: Retained while you remain subscribed or until you ask us to delete the data, subject to records we must keep for legal or security reasons
• Unsubscribe Records: A minimal suppression record may be retained after you unsubscribe so we can honor your request and avoid sending marketing email again
• Analytics Data: Retained according to analytics provider policies (typically 14-26 months)
• Affiliate Tracking: Retained according to affiliate network requirements (typically 30-90 days)

9. Cookies and Consent

We use cookies and related technologies for:

• Necessary Cookies: Essential for the website to function (always active)
• Analytics Cookies: To understand website usage (requires your consent)
• Affiliate Attribution: External offer links include identifiers that let providers or affiliate networks credit commissions to DoVPN
• Affiliate-click Analytics: Optional on-site click analytics runs only when the stored affiliate preference is enabled

Cookie Consent Mechanism

In compliance with GDPR Article 7, we obtain your explicit consent before setting non-essential cookies:

• Cookie Banner: You'll see a consent banner on your first visit
• Granular Control: Choose Accept, Reject, or Settings in the first-visit banner
• Analytics Loading: Google Analytics loads only after analytics consent
• Affiliate Links: External offer links retain commission-attribution identifiers regardless of the banner choice
• Affiliate-click Analytics: Reject disables DoVPN's optional on-site affiliate-click event; it does not remove attribution from an external offer link
• Consent Storage: Your choice is stored in browser localStorage (not a cookie)

Managing Your Cookie Preferences

You can control cookies in multiple ways:

• Our Cookie Banner: Make your choice when you first visit
• Settings: Click "Settings" in the banner for detailed control
• Browser Settings: Most browsers allow you to refuse cookies or delete them
• Reset Stored Choice: Clear this site's localStorage to reset the banner preference, then reload and choose again

Clearing localStorage does not stop analytics that already loaded on the current page or erase data previously collected. Analytics and DoVPN's on-site affiliate-click event are optional. Affiliate attribution remains part of external offer links so providers and networks can credit qualifying sales to DoVPN; their own privacy and cookie policies apply after you leave our site.

For more information about cookies, visit www.allaboutcookies.org.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all website traffic
• Secure hosting infrastructure (Cloudflare)
• Regular security updates
• Limited access to personal data

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

DoVPN.com is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@dovpn.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: privacy@dovpn.com
Response Time: We aim to respond within 5 business days

14. Supervisory Authority

If you are located in the EU/EEA and have concerns about our data processing practices, you have the right to lodge a complaint with your local data protection authority.

For the Netherlands, the supervisory authority is:
Autoriteit Persoonsgegevens
Website: autoriteitpersoonsgegevens.nl