Privacy Policy
This document describes what data the BLESS VPN service (the cyrvony.tech website, the customer account and the VPN network) receives, why, where it is kept and when it is deleted. It matches how the current version of the software actually behaves. The Russian version is the primary one.
1. Who processes the data
The operator of BLESS VPN is 0Z CLOUD. The service website is cyrvony.tech.
Contact for data requests and support: the Support section of your account or support@cyrvony.tech.
The control server and account database are hosted in the Netherlands. We process data to perform the terms of service (account, subscription, VPN access), to protect the service (abuse counters, activity logs) and to take payments and refunds through the payment provider. Auto-renewal is on only if you explicitly choose it when paying.
2. Account and sign-in
When you register we store:
- your email address (lower-cased), used for sign-in, verification, account recovery and support;
- a password hash (bcrypt). The password itself is not stored; it must be 12 to 72 characters long;
- whether the email is verified, whether the account is suspended, and the registration date;
- the version of the terms you accepted at registration.
Signing in creates a 7-day session. The database keeps only a SHA-256 hash of the random session token and its expiry; the token itself lives only in your browser's cookie. Signing out deletes the session; changing the password (in the account or through recovery) deletes all sessions of the account. You can end other sessions from your account.
Email verification links (valid for 24 hours) and password reset links (1 hour) are single-use; only a hash of the token is stored.
In your account, under “Your data” («Ваши данные»), you can download a JSON file with account, order, device and support details (passwords, VPN keys and service secrets are not included). The account is deleted in the same section with the “Удалить аккаунт навсегда” (delete account permanently) button after you review the consequences and enter your current password. If a paid period is still active, deletion requires a separate confirmation that this period is lost. Deletion is irreversible: sign-in and device access are revoked, unpaid orders are cancelled, personal data is anonymized and VPN access is removed on the nodes. Deleting the account does not trigger an automatic refund. Financial records (orders, payments, refunds) are kept separately, as in section 12.
3. Orders and payment
For each order we store the plan (name, price, currency, period, device limit), the payment and fulfilment state, the creation date and, if cancelled, the cancellation date. For each payment: the provider's transaction ID, amount, currency and time. For each refund: amount, state, refund transaction ID, the operator, the reason and an internal reference. We also store the subscription periods that were paid for.
We do not receive or store the card number or other payment details. If you turned on auto-renewal when paying, we keep that payment's provider transaction number (the provider charges the next term by it), the card network and the last 4 digits of the card, to show which card is saved. Removing the card in your account or deleting the account turns auto-renewal off and erases the last 4 digits. Payment happens on a hosted payment page of the provider MoonlightPay: you enter your card number and other payment details on the provider's page. The provider publishes its own legal details and rules.
To create the payment page we send the provider: amount and currency, the description "BLESS VPN subscription", your email (it cannot be changed on the page), a short order number for display, the internal order, account and payment attempt identifiers (for reconciliation) and the return address on our website. From the provider we receive the transaction number and type, amount, currency, completion time, the masked card number (first 6 and last 4 digits) and the card network. Of the mask only the last 4 digits are stored, and only when auto-renewal is on.
4. Devices and VPN access
When you connect a device, the app generates a key pair on that device; we receive only the public key. For each device we store its ID, public key, name and platform, whether it is revoked, when it was added and when it was last activated through the account. VPN connection times are not written to this record.
Single-use connection links and QR codes are stored as hashes; device verification records are deleted automatically one hour after they expire.
So that VPN nodes let your device in, they receive the device ID, its public key and the access expiry time. VPN exits are located in Finland, France, the USA and Russia; the control server with the database is in the Netherlands. This transfer is required to provide the service: without the key projection the device cannot connect.
5. What the VPN network does and does not log
The server (bless-server) and client (vxcore) parts of the VPN do not write to their logs:
- destinations: host names, IP addresses, ports, URLs, SNI and DNS names;
- connection error texts that contain a destination;
- client IP addresses: they are redacted from TLS/HTTP error messages.
To carry traffic, this data is processed in the node's memory for the duration of the connection.
What is logged: operational events — startup settings, counts of authorized and revoked keys, configuration reloads, sessions closed for revoked or expired keys, and transport errors as a fixed class (for example "timeout" or "refused") without the address. For abuse control, the subscription ID of a client that exceeds its transport limit is logged. Monitoring metrics contain only aggregate counters.
Operating system logs on the nodes (system DNS resolver, firewall, journald) are configured separately from the VPN software. Where we control rotation, those logs are kept no longer than 7 days unless a longer period is needed to investigate a specific incident.
6. Website, web server log and abuse protection
The website has no third-party counters, analytics, advertising scripts or external fonts.
The website's web server keeps a request log without IP addresses. A log entry contains only: the time; the site name (cyrvony.tech, www.cyrvony.tech or gitlab.cyrvony.tech; any other name is logged as "other"); the protocol and request method; the path without parameters (nothing after ?) — long hexadecimal identifiers in the path (16 characters or more — the form of order and device identifiers) are replaced with :id, and account pages are logged under the common name /index.html; the response code; request and response sizes; processing time; whether the request rate limit was applied; and the status code and timings of the internal service.
The web server log does not contain the IP address (or a hash of it), query parameters, User-Agent, Referer or cookies. The web server error log is switched off for the website, because every line of it contains an IP address. The IP address is used while a request is processed — to deliver the response and for the abuse protection counters (see below). The log is kept for 7 days (the current day and the six before it) and is deleted automatically. Tokens from emails travel in the link fragment (after #) and are not sent to the server.
The same server runs gitlab.cyrvony.tech, a development service used only by the service team, not by customers; for HTTPS requests to it the web server keeps a standard log (with IP addresses).
To protect against password guessing and abuse, the server counts requests per IP address and per email. The counters store only a SHA-256 hash of these values, not the values themselves, and are deleted automatically after about 20–30 minutes.
7. Support
Requests created in your account are stored in the database: category, subject, message text (yours and the operator's), the linked order if you chose one, time and state. The text is stored in readable form and is visible to support operators. Attachments are not supported. Do not send passwords, card data, VPN keys or activation links in support messages.
8. Email
We send only transactional email: email verification and password reset. There are no marketing emails. While a message waits to be sent, its text is stored encrypted; once it is sent or the link expires, the text is deleted and only service metadata remains (purpose, state, time). Email is sent through the service mail server on the cyrvony.tech domain (sender BLESS, noreply@cyrvony.tech).
9. Activity and operator logs
To investigate errors and disputes, the service records account and order actions: action type (for example email verification, password reset, order cancellation), account and order IDs and time. Operator actions (account suspension, device revocation, refund, support reply and so on) are recorded with the operator ID, target, reason and time. Operator access is role-based and protected with two-factor authentication.
10. Cookies and browser storage
- One session cookie: HttpOnly, Secure, SameSite=Lax, valid for 7 days. It is needed to sign in to your account.
localStoragekeeps the selected plan andsessionStoragekeeps technical keys for safely retrying an order. This data stays in your browser.- There are no third-party or advertising cookies.
11. Who receives data
- The payment provider MoonlightPay — the data in section 3.
- The service's VPN nodes — the data in section 4.
- The service mail server — your email and the text of the transactional message.
- The server hosting provider Hostkey: the control server in the Netherlands; the VPN nodes in the countries listed in section 4.
- Public authorities — only on a valid request that the operator must follow under applicable law, and only the data we actually hold.
We do not sell data and do not share it with advertising networks.
12. Retention
| Data | Period |
|---|---|
| Abuse protection counters (IP and email hashes) | about 20–30 minutes, deleted automatically |
| Device verification records | 1 hour after expiry, deleted automatically |
| Queued email text | until sent or the link expires (1 or 24 hours), then deleted |
| Sessions | valid for 7 days; the record is deleted on sign-out. Expired records are deleted automatically after 14 days |
| Account, devices | while the account exists; after deletion from the account, personal data is anonymized immediately and device access is revoked |
| Orders, payments, refunds | kept after account deletion for payment, refund and dispute handling; automatic purge of this class is not enabled |
| Support requests | kept while needed to handle the request and a related dispute; there is no separate automatic purge of this class |
| Activity and operator logs | kept to investigate errors and disputes; there is no separate automatic purge of this class |
| Website web server log (no IP addresses) | 7 days, deleted automatically |
| Database backups | used for recovery; a copy of deleted data may remain until the next backup rotation of the control server |
13. Your rights
You can ask what data we hold about you, ask us to correct or delete it, or turn off auto-renewal by removing the card in your account. Export and account deletion are available in the account under “Your data”. You can change or recover your password and revoke devices in your account. Changing the account email is not available yet. We reply to requests at support@cyrvony.tech on business days. The service is intended for people aged 18 or older; age is not checked in software at registration.
14. Changes to this document
A new version is published on this page with its date. Material changes take effect 7 days after publication, or immediately if required for security or by law. Continued use of the service after the effective date means you accept the new version. The version of the terms accepted at registration is stored in your account.