Privacy Policy

Effective: July 29, 2026 · Last updated: July 29, 2026

CitadelVPN ("we," "us," or "our"), accessible via https://citadelvpn.io, is committed to protecting your fundamental right to digital privacy. We operate under a strict Zero-Logs Policy supported by specialized volatile RAM-only server architecture.

This Privacy Policy explains what limited operational data we process, how we handle it, and why we physically cannot track, collect, or store your online activity.

1. Strict No-Logs Architecture (RAM-Only Infrastructure)

CitadelVPN is engineered from the ground up to ensure complete user anonymity. Our servers operate exclusively in volatile Random Access Memory (RAM-only) with zero hard disk drives or persistent storage media. All server RAM is encrypted in real time. In the event of a server reboot or power interruption, all temporary operational state data is permanently and irreversibly destroyed.

We DO NOT log, record, or store:

Browsing history, visited websites, or destination URLs.
Traffic contents, transmitted payload, or DNS queries.
Original public IP addresses assigned by your Internet Service Provider (ISP).
CitadelVPN IP addresses assigned to your session.
Connection timestamps, session durations, or precise bandwidth logs linked to your identity.

We do not perform traffic inspection, deep packet inspection (DPI) logging, or signature analysis.

2. Information We Collect and Process

To provide and maintain the Service, we process only the bare minimum data required for account authentication and transaction management:

A. Account Data

Email Address: Required for account creation, delivery of credentials/access keys, and password recovery.
Account Status & Expiration: Information regarding your active plan duration, active device limits (2, 5, or 15 devices depending on plan), and total remaining traffic balance (for plans with data limits).

B. Payment Information

All financial transactions are processed securely through certified international payment service providers (Visa, Mastercard, Apple Pay, Google Pay, Crypto Gateways).
CitadelVPN does not process or store full credit card numbers, CVV codes, or bank account credentials. We receive only transaction confirmations (e.g., transaction ID, timestamp, and payment method) necessary to credit your account.
No Auto-Renewals: We do not store payment card tokens for automatic recurring debits. All payments are initiated manually by the user.

C. Customer Support Communications

When you contact our 24/7 technical support team via live chat or email, we process your communication solely to resolve your technical or billing inquiry. Customer support logs are handled by qualified human specialists and are purged regularly.

3. Aggregate Operational Performance Data

To maintain network health, prevent server congestion, and optimize our 10 Gbps infrastructure, our monitoring tools collect anonymous, aggregated network statistics across entire server clusters:

Total server CPU load.
Total aggregate bandwidth utilization per server location.
Total number of concurrent active connections per server (non-identifiable sum).

This data is strictly aggregated across all connected users and cannot be linked to any individual user or account.

4. Cookies and Web Analytics

Our website (https://citadelvpn.io) uses minimal functional session cookies to:

Preserve your selected language preference (EN, FR, DE, NL, IT, AR).
Maintain secure user login sessions within the Client Area.

We do not use third-party tracking cookies, advertising pixels, or invasive web analytics scripts.

5. Third-Party Data Sharing & Law Enforcement Requests

No Data Selling: We do not sell, rent, trade, or monetize user data under any circumstances.
Third-Party Providers: We work with trusted infrastructure hosts and payment processors bound by strict legal confidentiality and data protection standards.
Law Enforcement Requests: Because we maintain a strict Zero-Logs policy on RAM-only servers, we do not possess activity logs, traffic contents, IP mappings, or connection timestamps. We cannot produce data that does not exist.

6. Your Data Rights (GDPR & Global Standards)

Under the General Data Protection Regulation (GDPR) and international privacy frameworks, you have the right to:

Access the personal data we hold about you (account email and subscription details).
Request the deletion or rectification of your account data.
Withdraw consent for customer communications at any time.

To exercise these rights, please contact our support team at support@mail.citadelvpn.io.

7. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please reach out to us:

Email: support@mail.citadelvpn.io
Live Chat: Available 24/7 via the website and Client Portal.