Vinipuch — logging and retention policy

Revision date: 20 September 2026.

This is the public contract of what the Service processes and what it deliberately does not keep. The legal frame is the privacy policy.

What Vinipuch does not keep

Vinipuch does not keep a history of visited sites, does not store traffic contents and does not record the User’s DNS queries. Traffic counters are only a total volume for the billing period, without destination addresses and without contents.

The Service does not promise an absolute “no-logs” mode: operational records needed for the account, payments and security are kept.

What is processed

• Telegram identifier and chosen language, account and access state;
• if the web cabinet is signed in with Google — the stable account identifier (sub); the Google email address is used only at sign-in and is not stored;
• if the web cabinet is signed in with email — the address in normalised form as the account identifier; the sign-in code and link are stored only as hashes for a limited time;
• payment and ledger records: balance, plan purchases, provider invoices and their status — without card details and wallet secrets;
• referral and promo operations to the extent needed for credit and limits;
• the web-cabinet session until it expires;
• access state and technical configuration identifiers;
• total traffic volume for the quota period;
• operational health logs and the admin audit log for payment and security operations.

An IP address may be used briefly for protection and rate limiting and is not stored as a permanent profile field.

When the site’s own analytics is enabled, anonymised page views are processed (path without query string, referrer, country without storing the IP, browser and OS class). Telegram identifiers, session ids and payment links do not go into this analytics. Retention of those events is up to six months. On the site the script loads after consent in the notice; if declined, events are not sent.

How long it is kept

• cabinet session — until the configured lifetime;
• payment journal and admin action log — as accounting records, for as long as law and Service operation require;
• site analytics events — up to six months;
• data needed only to protect against redelivered commands is not used as chat history.

How to ask or appeal

Account and payment details are in the privacy policy. Contact us via support in the Vinipuch Telegram bot. Do not send tokens, sign-in cookies or wallet secrets.