Privacy Policy

Last updated: September 15, 2026

This policy explains how VIP24ALL handles information for its accounts, payments, access codes and website. Contact support@vip24all.com about your information or this policy.

Account and service information

Google Sign-In supplies identity information with your permission, including your Google account identifier, verified email address and any basic profile information Google provides. Our account record keeps the identifier and verified Gmail address. VIP24ALL does not receive your Google password or request permission to read your Gmail messages.

We process session and security records, your Bitcoin receiving address and payment records, USD balance and ledger entries, purchases, package access dates, encrypted access-code records, payment and code-replacement acknowledgments, and support communications. Bitcoin transaction information is also recorded on the public blockchain; VIP24ALL cannot remove it from that network.

We use this information to sign you in, operate accounts and package validation, process payments and purchases, maintain accurate records, prevent abuse, investigate errors, provide support and meet applicable obligations. Necessary server and security logs may include IP addresses and request information. They are separate from the traffic counters described below.

Essential cookies and our own activity counters

Our first-party session cookie supports sign-in and request protection. It uses Secure, HttpOnly and SameSite=Lax settings. Signing out ends your authenticated VIP24ALL session. You can clear or block cookies in your browser, but sign-in and account actions require them.

We also use the existing session to estimate active visitors, count active signed-in users and count page views for owner-only administration. A visible page sends an activity signal about once a minute. The active window is five minutes. These are estimates of browser sessions and activity, not a count of unique people or proof that someone is looking at a page.

This first-party traffic feature stores keyed hashes representing the browser session and, when signed in, the account. A random value held only in the page's memory helps avoid counting a retried page-view request twice. Its traffic store does not contain the original session token, account ID, email, IP address, user-agent, referrer, page URL or title. This feature does not use browser fingerprinting, an additional analytics cookie, persistent browser storage or an external analytics provider. Google Analytics, described below, is separate from these counters.

During normal operation, inactive presence records are removed within six minutes of their last signal and page-view deduplication records within 24 hours. Cleanup runs every minute and at service startup after an interruption. Cumulative view counts and the tracking start date are retained. Encrypted recovery snapshots omit the activity detail and keep only aggregate statistics and the public price cache.

Google Analytics

Google Analytics 4 starts automatically on eligible public information pages to help us understand visits and improve the website. You can turn it off using Analytics preferences in the footer. A saved off preference prevents Google Analytics from loading. Turning analytics off does not prevent sign-in, purchases or other account functions. Our own activity counters described above continue independently.

Google Analytics is limited to the public packages, guide, privacy, terms and security pages while you are signed out. We exclude signed-in pages, deposits, administration and Google sign-in callbacks. We also exclude pages whose address contains a query string or fragment. Page views use a fixed page name and a clean public URL, without referral URLs. We do not send account identifiers, Gmail addresses, access codes, balances, payment details or form contents to Google Analytics.

When enabled, Google Analytics uses browser identifiers and cookies and processes technical information such as browser and device characteristics, language, session activity and page visits. Your browser connects to Google, which receives network information including your IP address and can derive an approximate location. Google may generate standard session and engagement information in addition to our page-view events. We disable advertising personalization, Google signals and enhanced measurement for this integration, and do not provide a VIP24ALL User-ID.

There is no automatic analytics prompt. You can turn analytics on or off using Analytics preferences in the footer. When you save a choice, we remember it in a secure first-party preference cookie for up to 180 days; deleting or expiring that cookie restores the automatic default. Analytics cookies are limited to this website's host and are configured to expire within 60 days without extending that period on each visit. Turning analytics off stops future collection and clears these analytics cookies; it does not retract information already sent to Google.

The cookie periods are separate from Google's retention of analytics data, which is governed by its policies and the Analytics property's settings. Google may process data on servers outside your country. Read how Google uses information from partner sites and Google's Privacy Policy for its processing, international transfers and controls. Contact us about any privacy rights available to you; choosing analytics does not waive those rights.

Package validation and independent providers

When you give an access code to a participating provider, that provider receives the code and sends it to our authenticated API. It can receive code validity, authorization or restriction status, and the start, expiry and remaining time for packages covered by its permission. This response does not include your Gmail address, balance, Google account identifier or Bitcoin receiving address.

A code is a reusable credential, not an anonymous interaction: a provider can recognize repeated use of the same code and may collect additional information through its own service. The provider's own terms and privacy policy govern that separate handling. See our service responsibilities.

We do not sell personal information. Access is limited to authorized account administration, support and the services needed to operate VIP24ALL, including hosting, Google authentication, email delivery and operational reporting. Information may also be disclosed when you direct us or when applicable law requires it.

Private owner reports are delivered through Telegram. Account reports can include your email address, registration, balance changes and account-review status; operational reports also help monitor service and payment processing. These reports are not public, but Telegram processes their delivery and private channels are not end-to-end encrypted storage. Current access codes, Google passwords and Bitcoin private keys are not included in these account reports. See Telegram's privacy policy.

The BTC/USD ticker is fetched by our server from Coinbase. Your browser does not contact Coinbase for that ticker, and we do not send your account identity with a price request. The displayed price is indicative and separate from payment valuation. External links and third-party sign-in services are subject to those providers' own privacy practices.

Retention and protection

The short activity-detail limits above apply to our own traffic counters, not to Google Analytics. Account, payment, purchase, consent, support and security records have separate retention needs: we keep them as reasonably necessary to provide the service, reconcile balances, investigate abuse or disputes and meet applicable obligations. These purposes may require retaining some transaction, ledger and consent history after an account is no longer used. Encrypted recovery copies may retain earlier records until those copies are replaced or expire.

We use HTTPS, restricted access, authenticated encryption for stored access-code values, and encrypted recovery archives. This does not mean that every account field is encrypted individually or that a service can guarantee absolute security. Read our security information for the protections and their limits.

Your choices and contact

Contact support@vip24all.com to ask about access, correction, deletion or other privacy rights available under applicable law. We may need to verify your account and explain any records that must be retained. Do not send your password, access code, private keys or recovery phrases with a request. You can also manage VIP24ALL's Google connection through your Google account; removing that connection does not itself erase VIP24ALL's records.

We date policy updates on this page. Updates do not remove your applicable privacy rights or rights attached to an existing purchase.