Last updated: October 7, 2026
Lux VPN is operated by Tetryx Solutions Corporation, 1st Floor, NEP Centre, HIS Building, Providence, Mahé, Seychelles ("Lux VPN," "we," "us," or "our"). These Terms of Service govern your use of the Lux VPN website, client area, apps and VPN service (together, the "Service").
By creating an account, buying a plan, or otherwise using the Service, you agree to these Terms of Service and the other policies on this page. If you do not agree, do not use the Service.
You must be at least 18 years old, or the age of legal majority where you live, to create an account. By using the Service, you confirm that you meet this requirement and that you are legally permitted to enter into this agreement.
Lux VPN accounts are anonymous. When you sign up we give you a 9-digit account number, and you choose a PIN. We don't ask for your name, and an email address is optional.
You're responsible for activity under your account.
The Service is provided to help you browse privately and securely. It is not a license to break the law. You agree not to use the Service to:
Illegal activity is still illegal when you're connected through a VPN.
We work to keep the Service reliable, but we don't guarantee uninterrupted or error-free access. Server maintenance, problems at our providers, or events outside our control may affect availability from time to time.
The Lux VPN name, logo and branding are our property. Our apps and software are licensed to you for personal use with the Service, not sold, and you may not reverse-engineer, resell or redistribute them.
To the maximum extent permitted by law, Lux VPN is not liable for indirect, incidental or consequential damages arising from your use of the Service. Our total liability for any claim is limited to the amount you paid us in the 3 months before the claim.
We may suspend or close accounts that break these terms. You can close your account yourself at any time; see Cancellation and Closing Your Account below.
These terms are governed by the laws of the Seychelles, without regard to conflict-of-law principles. Nothing in these terms removes a consumer protection right that applies to you under the mandatory law of the place where you live.
We may update these terms from time to time. The "Last updated" date at the top of this page shows when they last changed. If a change affects your subscription's price or renewal terms, we will tell you before it takes effect, as described in Automatic Renewal Disclosures.
Lux VPN is built so we know as little about you as possible. We don't ask for your name, an email address is optional, and we don't log what you do on the VPN.
We only email you if you've added a recovery email. When you have, we send:
These account and billing emails never include marketing. The newsletter is separate; see below.
If you use the contact form on our website instead of opening a ticket in your account, we receive the email address you type in (so we can answer), your message, and a name only if you choose to give one. These arrive in our support mailbox, and we keep them only as long as we need to deal with your message.
The newsletter signup in our website footer is separate from your account. If you sign up, the email address you enter goes to Brevo, the service we use to send the newsletter, and is used only to send occasional news and offers. Every newsletter email has an unsubscribe link. When you unsubscribe we stop emailing you; Brevo keeps the address marked as unsubscribed so it isn't added back by mistake, and we'll delete it completely if you ask. Signing up is never required to use the Service.
Only to run your account, take payments, provide the VPN, answer support requests, keep the Service secure and meet our legal obligations. We do not sell your information, and we do not use it for advertising.
Each of these acts only to provide its part of the Service. We disclose information to authorities only when the law requires it, and we can only disclose what we have, which is described on this page.
Our billing system, including all account data and backups, is hosted in Iceland.
| Data | How long we keep it |
|---|---|
| Account number, PIN hash, plans, VPN login, support tickets and notes | Until you close your account. Your account stays open after a plan ends, so you can renew later; close it in Account & Security when you no longer want it. |
| Recovery email and recovery file | Until you remove them, or the moment you close your account |
| After you close your account | Your VPN login is deleted, and your PIN and recovery details are erased, right away. Plans, orders, support tickets and notes are deleted 180 days later. |
| Payment records (invoices) | As long as tax and accounting law requires, even after your account is closed. They show your account number, plan, amount, payment method and date. |
| Your agreement to the Terms of Service at signup | Until your account's other data is deleted, as above |
| Your agreement to automatic renewal (the date, the plan and the terms you agreed to) | 3 years, or until 1 year after the subscription ends if that's later, as California law requires. This is kept even if you close your account sooner. |
| IP addresses from sign-in and signup attempts, contact form messages, newsletter signups and the restaurant example | 2 days |
| Approximate location shown on our website pages (not including the IP address) | 12 hours |
| Account numbers from signups that were never finished | Deleted within 36 hours |
| Backups | Full backups run weekly on a rolling four-week cycle, so deleted data can remain in a backup for up to four weeks |
Our website uses:
The cookie banner asks before any non-essential cookie is set. To change your choice later, clear this site's cookies in your browser and the banner will ask again. We don't use advertising cookies.
Some browsers send a Do Not Track (DNT) or Global Privacy Control (GPC) signal. There's no common standard for responding to DNT, so we don't respond to it. We don't sell or share personal information, and we don't run advertising or cross-site tracking, so a GPC signal has nothing to opt you out of. Visitor statistics run only if you accept them in the cookie banner.
Because accounts are anonymous, a request made from inside your account is how we know it's you. If you can't sign in, use your recovery email or file first. We can't act on a request for an account we can't verify belongs to you.
The General Data Protection Regulation (GDPR) applies to our processing of your personal data if you're in the EU or EEA, because we offer the Service to people there.
Legal basis for processing.
International data transfers. Our billing system and backups are hosted in Iceland, which is part of the European Economic Area. Lux VPN is operated by Tetryx Solutions Corporation, incorporated in the Seychelles, so some processing (such as reading support tickets) happens outside the EEA, and some of the providers listed above may process data outside the EEA. The data involved is deliberately small: an account number, optional email, plan and payment records, and support messages. We hold no special category data.
Your GDPR rights. You have the right to:
To use these rights, open a ticket from Support in your account, as described under Your rights above.
Our EU representative. In accordance with Article 27 of the GDPR, Lux VPN has designated an EU representative as a point of contact for supervisory authorities and people in the EU/EEA:
Trinix Sp. z o.o.
ul. Marcina Kasprzaka 31/119
01-234 Warszawa, Mazowieckie
Poland
Email: gdpr@luxvpn.co
You may contact our EU representative instead of, or as well as, contacting us directly.
This section applies if you're a California resident. It covers the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA"), the California Online Privacy Protection Act, and California's "Shine the Light" law. Where this section differs from the rest of this policy, this section controls for California residents.
The CCPA only binds businesses above certain revenue and data-volume thresholds, and Lux VPN does not meet them. We extend the rights below to California residents anyway.
Categories of personal information we collect. Using the CCPA's category names, over the past 12 months we have collected:
| CCPA category | What that means for us | Where we get it |
|---|---|---|
| Identifiers | Your account number; your email address, only if you add one or sign up for the newsletter; IP addresses kept for 2 days for security | Us, at signup; you; your browser |
| Commercial information | The plans you bought, payment method, amounts, dates and the payment provider's order reference | You and our payment providers |
| Customer records | Support tickets and the messages in them, and notes we add when helping you | You, when you contact support |
| Internet or network activity | None from the VPN. We do not log your connections, browsing or DNS queries. On our website, if you accept tracking cookies, W3Counter records the pages you visit there. | Your browser, only with your consent |
| Geolocation data | Approximate location only (city level), looked up from your IP address so some pages of our website can display it. It is not linked to your account. | 12 hours |
| Sensitive personal information | Only your account login: your account number with your PIN, which we store as a one-way hash and use only to sign you in. No government IDs, financial account numbers, precise geolocation, biometrics, health, racial, religious or union data. | You, at signup |
Why we collect it. To run your account, take payments, provide the VPN, answer support requests and keep the Service secure. Nothing else.
How long we keep it. See What we keep and for how long above.
We do not sell or share your personal information. We have not sold or shared the personal information of any consumer, including anyone under 16, in the past 12 months, and we have no plans to. "Share" here has the CCPA meaning of disclosing personal information for cross-context behavioural advertising, which we don't do. Because there is nothing to opt out of, we don't operate a "Do Not Sell or Share My Personal Information" link.
Disclosures for a business purpose. We disclose the categories above only to the providers listed under Who we share it with, each for its part of the Service.
Your CCPA rights. As a California resident you have the right to:
How to use your rights. Open a ticket from Support in your account and tell us which right you want to use, or close your account yourself to delete it. We'll confirm receipt within 10 business days and respond within 45 days. If we need more time, we'll tell you why and take up to 45 more days.
How we verify you. A request made from inside your account is verified by your account number and PIN. We won't ask for a government ID or any other new personal information to handle a privacy request.
Authorized agents. You can have someone make a request for you. We'll ask for written proof of their authority, and the request still has to be confirmed from inside your account.
Shine the Light. Under California Civil Code section 1798.83, California residents may ask about personal information disclosed to third parties for their own direct marketing. We don't disclose personal information to anyone for direct marketing.
Subscriptions and cancellation. California's Automatic Renewal Law gives you specific rights around auto-renewing subscriptions, including the right to cancel online. See Cancellation and Closing Your Account and Automatic Renewal Disclosures below.
The Service is not directed at anyone under 18, and we do not knowingly collect information from them.
Every Lux VPN plan, monthly, 6-month and 1-year, comes with a 15-day money-back guarantee from the date you bought it. If you're not satisfied, ask within that window and we'll refund it in full.
Open a ticket from Support in your account. Your account number is attached automatically, so all we need is which payment you'd like refunded. A reason is optional but helps us improve. If you can't sign in, use our contact page and include your account number.
When we refund a payment, the time it paid for ends.
Payments are non-refundable after the 15-day guarantee, except where the law requires otherwise. This includes monthly renewal charges. To avoid the next monthly charge, cancel before your renewal date; see Cancellation and Closing Your Account below.
Only the Monthly plan paid by card renews automatically. You can cancel it online at any time, in any of these ways:
There's no retention offer, phone call or chain of screens. You'll see a confirmation on screen, and if you've added a recovery email we confirm it there too.
If you can't sign in and need billing stopped, use our contact page with your account number and we'll cancel it for you.
You won't be charged again. Your VPN keeps working until the end of the month you've already paid for, then stops. Cancelling doesn't refund the current month, except as described in our Refund Policy. Your account stays open, so you can buy a new plan whenever you like.
These are paid once and never renew, so there's nothing to cancel. The same goes for any plan paid by crypto, another Payssion method or cash. When the plan ends, your VPN stops. If you've added a recovery email, we remind you 7 days before.
You can close your account at any time with Close account in Account & Security. When you do:
Closing your account doesn't refund unused time, except as described in our Refund Policy. If you're within the 15-day guarantee, ask for your refund before closing, because we can't find the account afterwards.
Only one plan renews automatically: the Monthly plan paid by card. It costs $9.99 every month, charged by our payment provider Fungies to the card you paid with, until you cancel. Card payments appear on your statement as "FUNGIES * TETRYX".
These plans are paid once and do not renew:
Before you pay for the Monthly plan by card, the checkout page shows these renewal terms (the price, that it renews every month until you cancel, how to cancel and the cancellation policy) next to a box you must tick to agree to them. You can't continue to the card payment without ticking it. We keep a record of that agreement.
After your first payment, we email you a copy of your subscription terms with a link to cancel, if you've added a recovery email. Whether or not you have an email, you can view, print or download the same terms at any time from My Plan. Your next charge date is shown on your Dashboard and on My Plan.
Renewal emails need an email address on your account. If you've added a recovery email:
If you haven't added an email, we can't send reminders. Your next charge date is always shown in your account.
Fungies may retry the charge. Your VPN keeps working for 3 days after the renewal date while it does. If the payment still doesn't go through, the subscription ends and your VPN stops. Your account stays open, and you can buy a new plan at any time.
Cancel before your renewal date. See Cancellation and Closing Your Account above. A renewal charge that has already been processed is not refunded automatically; see our Refund Policy.
If we change the price of the Monthly plan, or make any other material change to its renewal terms, we'll tell you before the change takes effect: in your account, and by email if you've added one. The notice will say what's changing, the new price, the date it applies from, and how to cancel if you don't want to continue.
If you're a California resident, California's Automatic Renewal Law (Business and Professions Code sections 17600 to 17606) gives you these protections as a matter of law: clear disclosure of the renewal terms before you buy, your consent to those terms, an acknowledgement after purchase, advance notice of material changes, and the ability to cancel online. If any part of our process falls short of that, open a ticket from Support in your account and we'll put it right.