Privacy Policy

Operator: EVPN — powered by FinDech UAB
Last updated: 2026-08-08

This policy describes product and website intentions in precise language. Corporate registration details will be published when confirmed. Placeholder legal identity fields must not be invented in public copy.

1. Scope

This Privacy Policy covers:

A. Website data — information processed when you use https://evpn.com, including contact/support forms and ordinary hosting/security request processing.

B. VPN service data — information related to the EVPN VPN product’s logging-minimisation design.

C. Promotion data — information related to the commercial placements that fund the free service.

These categories are different. Website hosting metadata is not the same as VPN data-plane logging, and neither is the same as a promotion impression count.

2. Who we are

EVPN is operated by FinDech UAB.

  • Registration number: to be confirmed
  • Registered address: to be confirmed
  • VAT number: to be confirmed

Contact addresses are published when configured via environment (for example public contact and security emails).

3. Website data (A)

3.1 Information you submit

If you use the support/contact form, we process the fields you provide, which may include:

  • Name
  • Email address
  • Message contents

We process this information to respond to your enquiry. We do not claim that the website “collects nothing.”

3.2 Ordinary hosting and security processing

Like most websites, request handling may involve standard technical metadata processed by hosting and security infrastructure (for example IP address, user agent, timestamps and requested URLs). We do not claim that hosting providers see zero HTTP metadata.

3.3 Cookies and analytics

This website does not use advertising pixels or third-party behavioural analytics suites. If essential technical cookies or similar storage are required for security or session integrity in future, they will be described here before introduction.

3.4 Contact-form rate limiting

If rate limiting is enabled, a short-lived hashed request key may be stored with a third-party Redis provider for a limited window. Raw IP addresses are not retained as long-lived application data for that purpose.

4. VPN service data (B)

EVPN’s VPN architecture is designed to minimise what any single system can know about you.

4.1 Using EVPN does not require an account

Installations are anonymous. You do not need to create an account, provide an email address or make a payment to use the VPN, and there is no subscription to identify you by.

If optional accounts are introduced later — for example to sync settings between your devices — they will remain optional, will be described here before launch, and will not be required to connect.

4.2 Never intentionally logged on the VPN data plane

EVPN’s design does not require, and does not intentionally log:

  • Destination IP addresses
  • DNS queries
  • Domains or websites visited
  • Packet contents
  • Per-user browsing history
  • Per-session traffic profiles linked to an identity
  • Account-linked connection histories on VPN gateways

4.3 Operational data

Aggregate operational metrics may be processed to run the service, such as CPU, memory, tunnel counts, aggregate throughput, packet loss, gateway health and service errors. These describe infrastructure, not individuals.

A short-lived tunnel allocation record is needed to route a connection at all. It is designed to hold no account identity, no promotion identity and no destination.

4.4 Architecture separation

Identity and promotion systems are designed to be separated from VPN gateway traffic observation. Gateways should receive short-lived tunnel authorisation material rather than account, profile or campaign data.

4.5 Audits

Independent audits are not yet completed. Claims of audited no-logs status will not be made until a real engagement exists and results can be published.

5. Promotion data (C)

EVPN is free. It is funded by clearly labelled commercial placements on EVPN-owned surfaces — the EVPN website and the EVPN applications.

5.1 No advertising based on your traffic

We do not perform advertising based on browsing history. We do not perform advertising based on DNS queries. We do not target by destination IP address, and we do not inspect packets for advertising purposes.

We do not sell, rent or share VPN traffic data. There is no arrangement under which any third party receives it.

5.2 What may be used to select a placement

Selecting which placement to show may read only:

  • The platform (for example iOS)
  • The app version
  • The locale the app reports
  • The EVPN destination country you selected in our own interface
  • Whether the campaign is running on that date

The selected destination country is used transiently to pick a placement for a single request and is deliberately never written to a promotion record.

5.3 Measurement

Promotion measurement is first-party and aggregate: daily impression and click counts per campaign, broken down by placement and platform. No third-party advertising or measurement SDK is embedded in the EVPN applications or on this website.

To avoid double-counting, a raw event may be stored briefly. It holds a non-reversible digest of a de-duplication key rather than any identifier for you, and contains no installation identity, no source IP address and no destination. Raw events are deleted within a short retention window (never more than 24 hours); only the daily aggregate is kept.

A placement links to a website EVPN does not operate. When you follow it, you leave EVPN and the other company’s privacy policy applies instead of this one.

Affiliate parameters attached to those links are static and set at campaign level — identical for everyone who clicks. No per-user value is added.

5.5 Disclosure

Every placement carries a visible label: Sponsored, Affiliate, Partner offer or From FinDech. There is no unlabelled placement.

Where GDPR/UK GDPR applies, processing is typically based on:

  • Contract / pre-contractual steps (support relating to a prospective or existing service)
  • Legitimate interests (securing the website, preventing abuse, and measuring aggregate promotion performance so the free service can be funded)
  • Consent where explicitly required

Website enquiry data is retained only as long as needed to handle the request and meet legal obligations. Raw promotion events are retained for a short window and then deleted. Exact retention schedules will be refined as the product launches.

7. Sharing

We do not sell personal data, and we do not sell VPN traffic data.

Processors may include email delivery providers (for contact forms) and hosting providers for the website. VPN infrastructure partners, if any, will be disclosed with live network metadata when production infrastructure is announced — not invented in advance.

Commercial partners receive aggregate campaign performance. They do not receive personal data, VPN traffic data or any user-level record.

8. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict or object to certain processing, and to lodge a complaint with a supervisory authority.

Use the published contact or security email channels when available, or the support form on this website.

9. Changes

We may update this policy as the product and legal entity details are confirmed. Material changes will be reflected by updating the date above.