Vercel website analytics
Public pages use Vercel Web Analytics to aggregate visitors, page views, referral sources, countries and device categories so we can evaluate guides and marketing. It runs only on registered public pages on the production domain. Before sending, we remove arbitrary URL query parameters and fragments, retaining only registered campaign tags. Sign-in, workspace, order and payment details, and text entered in the configuration checker are not sent as analytics content.
This measurement respects this page's pause preference, Do Not Track and Global Privacy Control. Vercel processes analytics requests and network data under its service policies. These aggregate visits do not establish a successful payment and are not linked to account identity.
Google sign-in data and purposes
Clerk handles Google sign-in. With your authorization, Clerk receives your Google account identifier, name, email and profile image to verify identity, create an account and display your profile. NailongVPN stores the Clerk identifier, name and verified primary email to associate your workspace.
This connection requests only openid, basic profile and email access—not Gmail, Google Drive, contacts or calendar access. NailongVPN does not use Google sign-in data to train AI models, target advertising or sell data.
Account and subscription records
We record account status, plans, order amounts and status, payment references, connection assignments, expiry, cumulative upload and download counts, referrals, and submitted support tickets and replies. These records provide subscriptions, usage reconciliation, order processing and troubleshooting.
When referral rewards are enabled, we record referral relationships, rewards, balance deductions and reversals to calculate balances, reconcile orders and handle refunds or disputes. Your workspace shows your balance and ledger. Administrators can view account balances and order deductions.
Referral review checks Stripe's net payment, refund, dispute and risk status. Where Stripe supplies a card fingerprint, we store only a private-key-derived digest to detect repeated rewards from the same payment method, not full card numbers or security codes. We also compare verified Gmail aliases between the inviter and invitee to help identify self-referrals. A payment-method identifier is not verified personal identity, and other methods may not supply it.
We also keep sessions, rate-limit records and administrative audit records for authentication, security checks and service recovery. Usage records in NailongVPN's business database are traffic counters; this is not a zero-logs guarantee for the entire network or infrastructure.
IP checks and connection comparison
When you run an IP check, your browser queries IPinfo and ipify for its exit address. Our website then queries proxycheck.io for network and risk information about that address. These requests do not include your NailongVPN sign-in credentials or subscription URL. Providers process network requests under their own policies.
Comparison records enter this browser's local storage only when you choose to save them. You can clear or export them on the page. NailongVPN does not write comparison records to its business database. Query responses use short-lived caching, and hosting services may retain request logs; this is not an infrastructure zero-logs guarantee.
Locations come from IP information; the check does not request browser location permission. Third-party risk values, cleanliness, application assessments and historical user estimates are reference information, not proof of dedicated use or third-party account safety.
Website analytics
NailongVPN uses Google Analytics 4 on public pages of the production website to measure visits, buy-entry clicks, traffic sources, devices and approximate regions, and evaluate website content. Google Analytics uses cookies to distinguish browsers and sessions and handles analytics data under Google's policies. Data may be processed outside Hong Kong.
The analytics script does not load in sign-in or account workspaces. Page addresses omit fragments and non-campaign query parameters. Only registered channel, campaign and content tags are retained; referrers contain only the source domain. We do not send names, emails, subscription URLs, node credentials, orders or payment details. Google signals and advertising personalization signals are disabled.
The website does not load analytics when the browser enables Do Not Track or Global Privacy Control. You can also manage or delete analytics cookies in your browser. Blocking analytics does not affect your account or connectivity service.
First-party conversion and failure measurement
First-party measurement records page categories, the registered public page paths viewed, the names of workspace views opened (such as plans or guides), source categories, registered campaign and content tags, device class, language, and buy clicks, sign-in or sign-up link clicks, opening guides, one-click imports and successful subscription-copy actions. On the sign-in and sign-up page it records only the steps reached (page opened, Google or email chosen, verification-code step reached), never the email address, code or anything typed. It also checks the browser identifier to tell whether the page was opened inside an app's built-in browser such as WeChat or Instagram, keeping only that app category, not the full identifier. To see the order of pages within a visit, each browser tab uses a random visit id that changes after 30 idle minutes; it is not derived from personal data and stays in that tab. Only registered page paths and campaign tags are accepted; arbitrary query parameters, full referrer paths, search terms and anything typed on a page are omitted. Local storage retains a first-source summary for up to 30 days. Order-source snapshots are fixed when the order is created and retained for 90 days. Only on later account visits may a user open a collapsed, optional discovery question; payment sessions show no question. Voluntary answers are recorded separately for 90 days and do not affect purchases, activation or connectivity. A signed random first-party cookie lasts 30 days; the server stores only a non-reversible identifier digest. After sign-in, visits may be linked to an account internally to examine registration, checkout, confirmed cash payment and activation. Account linkage, orders and payment details are not sent to Google Analytics, and account pages do not load GA.
Failure records contain operation categories, HTTP status or standard client-error categories, duration and necessary internal account linkage. They exclude request bodies, form contents, full page or subscription URLs, passwords, verification codes, node credentials and websites visited through the VPN. Copying a link does not establish an import or connection. Usage retention reuses existing counters, storing only daily observed growth and sampling coverage.
Operators and marked test accounts are excluded from analysis; test payments are not live sales. Online behavior events and daily usage summaries retain 90 days; failures retain 30 days, with hourly expiry cleanup. Recovery backups follow their existing rotation, so deletion is not guaranteed to reach all backups simultaneously. Existing orders, accounting, usage and security audits are not deleted by this measurement cleanup.
Do Not Track, Global Privacy Control or this page's pause preference stops browser events and optional visit linkage and failure measurement. Account, order, traffic metering and security processing continues; server business and usage summaries can still be produced from these service records. Blocking, separate devices and missing samples leave measurement gaps; unknown outcomes are not treated as churn.
Payments and service providers
Stripe's hosted checkout handles card payments. NailongVPN does not collect full card numbers or security codes in its own payment form. NailongVPN sends Stripe order and account references, amounts and plan details, and receives payment status.
Google and Clerk provide sign-in, Vercel hosts the website, Cloudflare provides DNS and human verification, and Vultr provides server infrastructure. These providers may process request, network and account data and manage their service records under their own policies.
When expiry and data reminders are enabled, Resend delivers them to your account email. Resend receives your email address and the message content, including plan name, remaining data and expiry time. If you open Stripe checkout but do not finish paying, one order reminder with the plan name and amount is sent about 2 hours after the order; at most one per order, and none once you pay, order again or after 72 hours.
Website and account services use overseas infrastructure. Data may be processed outside Hong Kong; we do not describe overseas servers as Hong Kong-only storage.
Sessions, retention and access
Sign-in requires necessary session cookies or identity tokens. Do not share passwords, verification codes, subscription URLs or node credentials. We use authentication, permission checks, HTTPS and private configuration, but these are not absolute security guarantees.
Account, order, usage, support and audit records are kept in the platform database and recovery backups. There is currently no uniform automatic deletion period. Stopping Google sign-in does not automatically delete NailongVPN orders or subscriptions.
To request access, correction or deletion, contact our brand support team through a NailongVPN workspace ticket or support@notice.nailongvpn.com. Requests require identity verification and manual handling. Outstanding orders, security investigations, applicable retention requirements and backups may require a separate review of the scope.
Revoking Google access and contact
You can revoke NailongVPN's Google authorization in your Google account's third-party connections settings. That sign-in may then stop working; first ensure you have another usable sign-in method.
For privacy and account data requests, submit a support ticket in the NailongVPN workspace or contact our brand mailbox at support@notice.nailongvpn.com.
Analytics preference for this browser
You can pause behavior analytics. Orders, payments, service usage, their server summaries and necessary security records remain managed by the server. Do Not Track and Global Privacy Control always take precedence. The page reloads after saving to stop the existing GA tag and apply the preference.