This post is part of a series reviewing the privacy policies of popular VPN services. The aim is to find out whether the VPN takes customer privacy seriously. This is not intended as a review of a VPN service, which would need to take into account a number of other factors. For more privacy guides and our criteria for reviewing them, click here.
VyprVPN is pretty upfront about what data it collects and says the following:
[Session data] is maintained for use with billing, troubleshooting, service offering evaluation, TOS issues, AUP issues, and for handling crimes performed over the service. We maintain this level of information on a per-session basis for at least 90 days. We may keep upload & download bytes at an aggregate level for longer periods of time.
As we’ve outlined more than once in this series, there’s no real reason to log data for much longer than a couple of weeks - if your aim is troubleshooting network issues and other such maintenance. A three month retention period will be implemented to help VyprVPN determine if anyone is violating its terms of service (which it clearly states in the above paragraph). This is where you have to ask yourself just how private VyprVPN service really is. The TOS include the following prohibited activities:
- Spamming (e-mail, Usenet, message boards, etc.)
- Copyright, trademark, and patent infringement.
- Defamatory or abusive language
- IP Spoofing
- Illegal or unauthorized access to other computers or networks
- Distribution of Internet viruses, worms or other destructive activities
- Export control violations
- All other illegal activities
Most of that seems reasonable enough, but there’s always going to be grey areas. “Abusive language,” for instance, covers a very wide-spectrum of behaviour and can mean different things to different people. “All other illegal activities” can mean different things in different jurisdictions. A relevant example is the internet TV service Aereo, which while legal in a number of states in the US, is currently facing challenges to its legality in other states.
Cookies and data
Criminal and civil investigations
To sum up…