Privacy Policy

Last updated: April 21, 2026

Pyramid VPN ("we", "us", "our") operates the Pyramid VPN mobile application and the website pyramidvpn.com (collectively, the "Service"). This page tells you, plainly, what we collect, what we don't, and what we do with it.

1. What we collect

Account data: the email address and password you supply when you sign up. Passwords are stored as bcrypt hashes — we cannot read or recover them.
VPN configuration: the WireGuard public key of each device you register, the private IP we assign it inside the VPN tunnel (e.g. 10.8.0.7), the server region you connect through, and timestamps of when the config was created.
Operational metadata: basic request logs (timestamp, HTTP method, status code) retained for up to 14 days for debugging and abuse prevention.

2. What we do NOT collect

We do not log your browsing activity, DNS queries, visited websites, or the content of any traffic that passes through the VPN tunnel.
We do not store the source IP address you connect from alongside your VPN activity.
We do not sell, rent, or share your data with advertisers or data brokers.
We do not use third-party analytics, tracking pixels, or advertising SDKs in the app.

3. How we use the data we do collect

To let you sign in and manage your account.
To provision and revoke VPN tunnels on the servers you choose.
To investigate abuse (e.g. spam signups, denial-of-service attempts) and keep the Service running.

4. Where your data is stored

All data is stored on servers we operate in the European Union (Stockholm, Sweden). We do not use third-party cloud databases or SaaS tools that would be given access to your account information.

5. Data retention

Account records: kept while your account is active. Deleted within 30 days of a deletion request.
VPN peer configurations: kept until you remove them or delete your account.
Request logs: automatically purged after 14 days.

6. Your rights

You can request that we delete your account and all associated data at any time by emailing privacy@pyramidvpn.com from the address you used to sign up. We'll confirm deletion within 30 days.

7. Children

Pyramid VPN is not directed to children under 13 and we do not knowingly collect data from them.

8. Changes to this policy

If we make material changes we'll update the "Last updated" date above and, for existing users, notify you by email before the changes take effect.

9. Contact

Questions? privacy@pyramidvpn.com