Last updated: 08/12/2026

CometVPN Privacy Policy

1. How CometVPN Gathers and Stores Users’ Personal Data

As an online VPN service provider, CometVPN strives to gather the minimum amount of data necessary to ensure the Service’s operation.

CometVPN does not monitor, record, or store the User’s online activity while the User is connected to the Service. Specifically, CometVPN does not log the User’s browsing history, the websites or services the User accesses, DNS queries, the content of the User’s traffic, destination IP addresses, or the User’s originating IP address while connected to the Service.

For limited operational purposes, CometVPN does store information about the User’s connection to a specific VPN server (User ID, the server used, and session length). This information contains no browsing activity, no DNS requests, no traffic content, and no record of the websites or services reached through the Service. It is deleted automatically within 9 months after the session ends.

Because CometVPN does not store the User’s originating IP address or online activity, this operational data cannot be used to reconstruct a User’s browsing history.

This section describes the VPN connection itself. CometVPN’s Website and applications do use cookies and analytics to understand how CometVPN’s own pages are used, as described in sections 1.7 and 2.9. These never observe what the User does through the VPN connection.

1.1 Account User Data

When a User creates a new CometVPN account or updates an existing account, the Service collects and stores this information as it is necessary for the Service to run adequately.

1.2 Operational Data

CometVPN also collects and stores what we call operational information. This data is necessary to ensure the Service’s operation and is gathered when a User connects to the Service. This data includes the User’s operating system version, CometVPN application version, the total amount of data used, and other operational information (payments made, Service upgrades or downgrades, referrals, participation in special offers).

CometVPN’s applications also generate a random device identifier and send it with requests to CometVPN. This identifier is not derived from the User’s hardware and contains no information about the User or the User’s device. It allows CometVPN to apply per-device limits, detect abuse of the Service, and keep sessions consistent across CometVPN’s applications.

1.3 User Data Collected on Payments

CometVPN accepts payments through our partners — Stripe, Airwallex, UnionPay, PayPal and Coingate. When a User makes a purchase using any available payment method, it will result in a data exchange with the relevant partner. Payment details are collected directly by that partner and handled under that partner’s own privacy policy.

When the User pays for the Service with a credit card, CometVPN stores the following data:

• Cardholder’s last name
• Date of credit card use
• Last four digits of the credit card

This data is used exclusively for credit card fraud prevention. CometVPN never stores the User’s full credit card number, security code, or location at the time of purchase. To maintain the safety of payment information, CometVPN adopts all available security measures (like multi-factor authentication) available from the payment partners.

CometVPN also retains a record of each transaction — its reference, amount, currency and outcome — for billing, accounting and tax purposes.

1.4 Other Data CometVPN Doesn’t Gather

To make things clear, CometVPN does not gather, log, or store the following information:

• IP addresses connecting to the Service
• The User’s originating IP address while connected to the Service
• DNS queries from connected Users
• Destination IP addresses, or the applications, websites, or services the User uses while connected to the Service
• The content of the User’s network traffic

1.5 Diagnostic and Crash Reporting

To find and fix defects, CometVPN uses Sentry, an error and crash reporting service. When an error occurs in CometVPN’s applications or Website, CometVPN may transmit the error and its technical stack trace, the application version, a record of the navigation steps leading up to the error, the User’s operating system or browser, and the application’s language and time zone setting.

So that a fault can be matched to a support report, these reports are associated with the User’s account identifier and email address. For VPN connections, a report may also include the protocol in use, the identifier of the VPN server involved, and the stage at which a connection attempt failed. Reports do not include the User’s browsing activity, DNS queries, or traffic content.

In CometVPN’s desktop applications, a crash also produces a technical crash dump — a snapshot of the application’s memory at the moment of failure. Crash dumps are used solely to diagnose the failure. CometVPN also samples technical performance measurements from a proportion of sessions in order to identify slow operations.

1.6 Customer Support

If the User contacts CometVPN support, CometVPN uses Intercom to manage the conversation. CometVPN provides Intercom with the User’s email address, account identifier, and an authentication code that confirms the User is the account holder. The content of the User’s messages, and any information the User chooses to include in them, is stored in Intercom.

1.7 Marketing Attribution

So that CometVPN can understand which campaigns and partners introduce new Users, CometVPN records how a visitor arrived at its Website. This consists of the campaign parameters contained in the link the visitor followed (for example utm_source, utm_medium, utm_campaign, utm_id, utm_content, utm_term), the address of the external page that referred the visitor, and any referral or affiliate code.

This information is stored both in cookies in the visitor’s browser (see section 2.9) and, independently, as a record on CometVPN’s own servers, so that attribution continues to work when third-party analytics scripts are unavailable. Where available, the identifiers used by CometVPN’s analytics provider are included in that record so that CometVPN can measure how much of its own measurement is missing. Only the first such record is kept; a later visit does not overwrite it.

Where this information is used for marketing measurement, CometVPN relies on the User’s consent. Where it is used to correctly credit a referral or affiliate partner, it is necessary to perform CometVPN’s agreement with that partner.

Personal Information

Any personal information the User shares with CometVPN will be handled in accordance with the following principles:

2.1 Accountability

In case you have any concerns about how CometVPN handles your personal information or questions about this Privacy Policy, don’t hesitate to contact us at [email protected].

2.2 Sharing Personal Information With Third Parties

CometVPN will not share any of the User’s personal information with other commercial parties under any circumstances except as described below.

CometVPN may send data to third parties that aid the Service in terms of customer support, hosting, emailing, securing the Service’s infrastructure, DDoS prevention, payment processing, Website analytics, and Service usage analytics. These parties act on CometVPN’s instructions and may not use the data for their own purposes. The categories of such parties, and what they receive, are:

In case CometVPN is served with a legally binding subpoena, warrant, or any other legal document and the law urges CometVPN to comply, the extent of disclosure is limited to personal information listed in this privacy notice.

In case CometVPN’s organizational structure changes (due to restructuring or acquisition), the Service might migrate the User’s personal information to a third party. However, CometVPN will ensure that such a third party enters an agreement under which the use of the User’s personal information only relates to purposes necessary for the transaction.

CometVPN doesn’t store the User’s IP address when connected to the Service and can’t identify Users based on this data. In addition, CometVPN cannot share information about the User’s activity (applications, websites, services, IP addresses, or any similar information) as the Service does not store this information.

CometVPN does not sell or trade the User’s personal information, and does not share it with advertisers for the advertisers’ own purposes.

2.3 User Consent and Interest

When the User signs up and shares personal information with the Service, the User provides consent for CometVPN to process and use this information as described in this Privacy Policy. CometVPN relies on interest for research, marketing, and fraud prevention. If there’s a legal obligation for obtaining the User’s consent, CometVPN will obtain it.

The User reserves the right to decline contact from CometVPN, and may withdraw any consent previously given at any time. Withdrawing consent does not affect processing that has already taken place.

2.4 Limiting Data Gathering

CometVPN takes great care not to gather personal information indiscriminately. Gathering personal information is limited to the minimum necessary to operate the Service.

2.5 Limiting Information Use, Retention, and Disclosure

CometVPN will not use the User’s personal information for any purpose the User did not consent to. CometVPN will never sell or trade personal information for monetary gain or any commercial purposes.

CometVPN’s employees will be granted access to personal information on a need-to-know basis. A condition of employment for all these employees is to respect the confidentiality of this personal information.

CometVPN stores personal information strictly as necessary for the purposes this information is collected - to ensure uninterrupted Service operation, pursue legitimate business purposes, resolve disputes, organize legal defenses, enforce agreements, and comply with any applicable laws. CometVPN will erase any records containing personal information once they’re no longer required. This procedure will be performed in a way that ensures the User’s privacy.

2.6 Privacy Protection

CometVPN utilizes the strongest available measures to protect its records, including the User’s personal information. CometVPN implements the most advanced physical, technical, and business security measures designed to prevent any unauthorized access, theft, loss, disclosure, copying, modification, or use of the User’s personal information.

2.7 User Access

If the User has any questions regarding CometVPN’s records which contain the User’s personal information, CometVPN will try its best to answer them. The User reserves the right to be informed about the User’s personal information CometVPN maintains and how that information is used. CometVPN will provide the User with the information on the existence, use, and disclosure of the User’s personal data upon request.

2.8 Right of Access, Erasure, Rectification and Restriction

The User reserves the right to inquire about how CometVPN is processing the User’s personal information, request access to this information, and request CometVPN to delete, correct, or amend this personal information in case it’s inaccurate. The User also has the right to restrict or object to processing, to receive their personal information in a portable form, and to lodge a complaint with their national data protection authority.

Contact us at [email protected] to seek rectification, request access, or request erasure of your personal information CometVPN has gathered. CometVPN requires each User to log in to their account with a valid email and a password before gaining access or being allowed to make any changes to the User’s personal information.

As a sign of good faith, CometVPN provides each User with the ability to erase their personal information. However, CometVPN may not be able to comply with this request in certain situations, including but not limited to:

• Legal obligations
• Litigation between the User and CometVPN
• Situations in which removing this information would disrupt User’s access to the Service
• Records CometVPN is required to keep for accounting or tax purposes

In case CometVPN determines that there is no way to erase the User’s personal information, CometVPN will provide an explanation and contact information for any further inquiries.

Should you have any questions regarding our privacy practices, this Privacy Policy, or filing a complaint with the proper authority, contact CometVPN at [email protected]. CometVPN will try to address any concerns to the best of its ability, as well as attempt to resolve any possible privacy issues.

In case you’re not satisfied by how CometVPN addressed your complaints or concerns, you can contact [email protected] for further guidance at: Advanced Tower Building, First floor, Ricardo Arias Street, Panama City, Republic of Panama, https://cometvpn.com.

2.9 Cookies

CometVPN uses cookies to ensure the proper functioning of its Website and applications. Cookies are small text files stored on the User's device. CometVPN categorizes cookies into four groups:

Necessary Cookies (always active)

These cookies are essential for the Website to function and cannot be disabled.

Preferences Cookies (optional)

These cookies remember the User's settings and preferences, such as language and display options, to provide a personalized experience.

Analytics Cookies (optional)

These cookies help CometVPN understand how visitors interact with the Website. They record activity on CometVPN’s own pages only, and never the User’s activity through the VPN connection.

Microsoft Clarity records how visitors move through and interact with CometVPN’s pages, including clicks, scrolling and the content displayed on those pages, so that CometVPN can find usability problems. It does not observe anything the User does through the VPN connection.

Marketing Cookies (optional)

These cookies help CometVPN measure the effectiveness of its advertising.

Users located in the EU/EEA and United Kingdom have all optional cookies denied by default until they explicitly opt in via the cookie consent banner. Users can change their cookie preferences at any time through the cookie settings available on the Website.

2.10 International Data Transfers

Some of the service providers listed in section 2.2 are located outside the User’s country or outside the European Economic Area. Where CometVPN transfers personal information to such a provider, it does so on the basis of an adequacy decision covering that provider’s country, or under Standard Contractual Clauses approved by the European Commission together with appropriate additional safeguards.

2.11 Children

The Service is not intended for children under the age of 16, and CometVPN does not knowingly collect their personal information. If you believe a child has provided CometVPN with personal information, contact [email protected] and CometVPN will delete it.

3.0 Privacy Policy Changes

CometVPN reserves the right to update this Privacy Policy as needed. Information on these updates will be posted online. The User’s continued use of the Service past the effective date of these changes establishes the User’s acceptance of these changes. CometVPN will provide an effective date on top of this Privacy Policy for the User’s convenience.