Effective date: October 25, 2026
HahaVPN is operated by Firebird Online Services Ltd. (“we,” “us,” or “our”). This Policy explains how we handle information when providing the HahaVPN apps, website, APIs, and VPN service.
1. Core Principles
We process only the information necessary to provide, protect, and support HahaVPN. The initial release of HahaVPN does not require registration or sign-in, contains no advertising, and does not use third-party crash analytics services. The website uses Cloudflare Web Analytics only for aggregate traffic and performance measurement. We do not sell personal information or use VPN browsing activity for advertising, profiling, or behavioral analysis.
2. VPN Activity
The HahaVPN VPN-node software and application logs under our control do not record or persistently store:
- network traffic or the content of communications;
- domains visited, DNS queries, or destination IP addresses;
- source IP addresses used to connect to the VPN;
- VPN connection times, session duration, or traffic volume.
Data required to establish and maintain a VPN connection is processed in real time only while needed for the connection and is discarded when no longer needed. We therefore cannot provide users or third parties with VPN activity data that we do not retain.
We manage the software, configuration, and operating policies of HahaVPN VPN nodes, but may use infrastructure supplied by data centers, server-hosting, cloud-computing, and network-connectivity providers. This does not mean that we own all server hardware. Those providers may process source IP addresses and necessary network metadata to carry traffic, defend against attacks, or troubleshoot their infrastructure, subject to their technical capabilities, contracts, and legal obligations.
3. Other Information We Process
3.1 Information Stored on the Device
The app may store language settings, privacy-notice acknowledgment status, the selected node, system VPN configuration, and caches needed to provide functionality on the user’s device. This information is not uploaded as a user profile or used for cross-app tracking. Users may clear relevant information through the app or device settings; deletion after uninstalling is managed by the operating system.
3.2 Website and API Information
When a user visits the HahaVPN website or APIs, we and providers of hosting, content-delivery, and network-security services may process IP addresses, request times, request paths, response status, browser or client type, and security-event information. This information is used to deliver content, maintain security, and troubleshoot problems.
Necessary security and troubleshooting logs are retained for no more than 30 days and are then deleted or anonymized. These logs do not contain websites visited through the VPN, DNS queries, or communications content.
The website may store the user’s language preference locally in the browser. We use Cloudflare Web Analytics to obtain aggregate website-traffic and page-performance statistics. The service does not use cookies, local storage, or individual fingerprinting. We do not use the resulting data for advertising or profiling, and it does not include websites visited, DNS queries, or communications content carried through the HahaVPN VPN service.
3.3 Contact and Support Information
If a user contacts us by email, we process the email address and any message content or attachments the user chooses to provide to respond to the request, provide support, protect the service, or comply with legal obligations. Please do not send unnecessary sensitive information in support emails.
3.4 App Stores and Other Third Parties
When a user downloads HahaVPN through the Apple App Store, Google Play, or another third-party platform, that platform may process device, download, purchase, or account information under its own privacy policy. We receive only the limited information that the platform makes available to us. Information independently collected by a third-party platform is not controlled by this Policy.
4. Purposes of Processing
We use the information described above only to:
- provide and maintain the apps, website, APIs, and VPN service;
- protect the service, users, and networks, prevent abuse, and troubleshoot problems;
- respond to user requests and provide support;
- comply with applicable law and respond to valid legal requests; and
- maintain and improve the service without profiling users based on VPN browsing activity.
5. Sharing of Information
We do not sell or rent personal information or provide it to advertisers.
Providers that supply data-center, server-hosting, cloud-computing, network-connectivity, content-delivery, security, email, or app-distribution services may process information necessary to provide those services. Depending on each provider’s role, we use reasonable measures such as contracts, configuration, and access controls to limit the scope of processing.
We may also disclose limited information that we actually hold when required by applicable law or binding legal process, or when reasonably necessary to protect the lawful rights and safety of users, the service, or others. We will not provide VPN activity data that we did not record or retain merely because a request is received.
6. Retention
- VPN activity: not persistently stored in the HahaVPN VPN-node software or application logs under our control;
- website and API security and troubleshooting logs: no more than 30 days, after which they are deleted or anonymized;
- information stored on the device: until the user clears or resets it or uninstalls the app, subject to operating-system behavior;
- contact and support information: only for as long as needed to handle the request, resolve disputes, and comply with applicable legal obligations.
If the law requires a longer retention period, we retain the relevant information only to the extent and for the period required.
7. Data Security and the Limits of a VPN
We use technical and organizational measures appropriate to the nature and risks of the information. Traffic between a user’s device and a HahaVPN VPN node is encrypted by the VPN protocol in use.
A VPN cannot eliminate every privacy and security risk. A user’s internet service provider may still know that the user is connected to a VPN. Destination websites, apps, and other third parties continue to process information voluntarily provided by the user under their own policies and may identify the user through signed-in accounts, cookies, device information, or other means.
8. International Processing
HahaVPN servers and service providers may be located outside the user’s country or region. Data-protection laws differ between jurisdictions. We will use reasonable safeguards based on the actual processing activities and applicable law.
9. User Choices and Rights
Users may stop using the VPN, uninstall the app, clear the website language preference, or revoke system VPN permission through device settings. Subject to applicable law, users may also request access to, correction of, or deletion of relevant personal information we hold, or object to certain processing.
Submit requests to privacy@hahavpn.com. We may need to verify the requester’s identity to prevent unauthorized access or deletion. Because the initial release does not require an account and does not retain VPN activity logs, we may have no data that can be associated with a particular user.
10. Minors
HahaVPN does not knowingly collect personal information from minors beyond what is necessary to provide the service. Users who have not reached the legal age of majority where they live should use the service only with the consent and supervision of a parent or legal guardian. A guardian who believes that a minor has provided us with unnecessary personal information may contact privacy@hahavpn.com.
11. Changes to This Policy
If our data practices materially change, we will update this Policy and, where required by applicable law, provide prominent notice or obtain consent. The latest effective date will appear at the top of this Policy.
12. Contact Us
Firebird Online Services Ltd.
Water’s Edge Building
Meridian Plaza
Road Town, Tortola VG1110
British Virgin Islands
Email: privacy@hahavpn.com