Privacy Policy

dFly is operated by dFly Privacy Ltd, a company registered in England and Wales. We are the data controller for the information described on this page. For any privacy request, use our contact form.

We do not log your browsing activity. Nothing in our systems records the sites you visit, the DNS queries you make, or the destinations you connect to — there is no such record to hand over, lose, or sell.

We do not store your IP address in our databases, and we run no analytics or advertising trackers. There is no Google Analytics, no advertising pixel, and no third-party tracking script on this site.

Our VPN infrastructure keeps the most recent connection IP address for each device registered to your account, and shows it to you on your Devices page. It exists so you can recognise your own devices and remove one you do not recognise.

No history is kept. Each time a device connects, its previous value is replaced, so there is no record of where you have connected from over time. Removing a device removes its entry.

If you sign in through Telegram, we store your Telegram ID, username and display name, and your language preference. If you sign in on the web, we store your email address and an identifier from our authentication provider. If you connect both, they are linked to one account.

Alongside that we hold your subscription and its expiry, your account balance, your orders and payments, the total volume of traffic your account has used, and timestamps of when the account was last active. Traffic is a byte count only — it says how much, never what or where.

If you contact support we keep your messages and any files you attach for as long as needed to resolve the request and to answer follow-ups.

When you arrive from a campaign, referral or partner link, we record which one — the channel, source, campaign and any UTM parameters in the link, plus the referral code if someone referred you. We use it to understand which channels work and to credit referrers correctly.

We do not see or store your card details. Payments are handled by our payment providers, and we keep what they return to us: the provider, their payment reference, the amount, the currency and the status.

Telegram payments carry no payer identity, because we never request one — our invoices ask for no name, email, phone number or address.

Our authentication provider handles sign-in, sessions and passwords. Our VPN infrastructure receives the account username and, if you signed in through Telegram, your Telegram ID, so it can attach your subscription to the right account. Telegram processes anything you send to our bot. Our payment providers process your payment.

We do not sell your data, and we do not share it with anyone for advertising or tracking.

We use a cookie that keeps you signed in, and one more: dfly_campaign, which remembers which of our own links brought you here, for 30 days. It holds a campaign code and nothing about you. We run no analytics cookies and no advertising cookies, and we do not share any of this with third parties. Our Cookie Policy lists everything we store in your browser and which of it is not strictly necessary.

Your browser also stores a note that you have seen our cookie notice, so we do not show it repeatedly.

You can delete your account yourself from your Profile page, and it takes effect immediately. Our Data Deletion page sets out exactly what is destroyed and what is kept.

What we keep is records of a business, not facts about a person: payments, orders, subscriptions and referral credit; how you first found us; and how you used the service. All of it is detached from your name, email and sign-in identity — except a link to the account of anyone who referred you, which stays live so their referral credit stays accountable. The Data Deletion page has the complete list.

Under UK data protection law you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Ask through our contact form and we will respond within one month. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

If we change what we collect, we will update this page and its date. This policy is governed by the laws of England and Wales.