What to do
What can you hand over to the authorities?
Only what we have: the account identity (name, email, country), the subscription and payments.
We can also hand over the account a port was assigned to. For that, we must be given an exit IP address, a port and a time.
The exit IP address is the VPN server’s address, which sites see.
Never the sites you visit or your browsing: we do not keep them.
To link a port to an account, we keep a single piece of data, for 365 days. It is the port range assigned to your account on a server’s exit address.
It contains no browsing data. It is used to handle an abuse report or a legal request.
Who can this information be passed to?
Only to the French authorities, on a legal request, and to the host of the server concerned when it reports abuse to us.
Never to an individual or a rights holder.
The details are on the Security & transparency page.
Is FuzeVPN affected by the “14 Eyes”?
FuzeVPN is established in France, one of the 14 countries in the intelligence group often called the “14 Eyes”.
What matters for you: we keep no VPN activity logs. So no browsing can be handed over, to anyone.
Do you measure my data volume?
No. Your data volume is neither measured nor recorded: not per account, per device or per session.
Your data is unlimited, with no quota at all.
What would be found on a seized VPN server?
Its configuration, keys, certificates and technical states, nothing else.
Servers run almost entirely in memory. They receive neither your email nor your history.
The link with your account exists only in the central API, hosted in France.
The details are on the Security & transparency page.
Why publish the apps’ code?
So that anyone can check what they do.
The code of the Windows and Android apps and of the extensions is public on GitHub, under the MPL-2.0 open-source licence.
Any reported flaw is also fixed faster.
Security relies on encryption and keys, never on keeping code secret.
The public repositories:
- Windows: github.com/FuzeVPN/windows-app
- Android: github.com/FuzeVPN/android-app
- Browser extensions: github.com/FuzeVPN/browser-extension
Is the servers’ code public?
No. The server-side code, meaning the API and the customer area, is not published.
An independent audit is planned.
How do I report a security flaw?
Write to support at contact@fuzevpn.com, with “Security” in the subject.
What to describe, and what we do next, is in the article on contacting support.
Which providers do you work with, and where are they established?
A location’s traffic is processed in the country of its server. The details are on the Privacy page.
Here are our providers, with their role and country:
- Accounts, API and emails: OVH SAS, in France.
- Public website: LWS, in France.
- Routing and protection of the website: Cloudflare, Inc., in the United States. It is certified under the Data Privacy Framework and bound by the European Union’s standard contractual clauses.
- Payments: SumUp Limited, in Ireland; Google Ireland Limited for Google Pay, and Google Commerce Limited, in Ireland, for Google Play.
- VPN servers: OVH SAS, IONOS Cloud France SAS and HolyCloud (GENIUSWEER SAS), in France; HosterDaddy, in India; JustHost (BAXET), in Russia; LuraHosting Datacenter LTDA, in Brazil.
How is my card payment processed?
You enter your card directly with SumUp, our payment provider.
We never keep your card number.
The details are in the article on paying for your subscription.
Paying for my subscription: payment methods, currency and price
How do I access, correct or delete my data?
Write to support at contact@fuzevpn.com to access, correct or delete your data.
The Privacy page details the data processed and how long it is kept.
It also explains your right to lodge a complaint with the CNIL, the French data protection authority.
How do I delete my account?
In your account, open your profile and use “Delete account”.
You can also write to support at contact@fuzevpn.com.
Want a refund? Request it before deleting your account.
What deletion changes for your subscription is explained in the article on cancellation and refunds.