Skip to content
Back to Solène

Privacy policy

Effective 6 November 2026 · Version 1.0

1. Who is responsible

Verlium Networks, a Spain-based network infrastructure company, is the controller for personal data used to operate Solène. Contact us at contact@solenevpn.com. This Privacy Policy applies to the website, Telegram bots and Mini Apps, support and subscription configuration delivery. It takes effect on 6 November 2026.

2. Information we process

Telegram provides your numeric user ID, username when available, display name and initial language. We store your chosen language, account role and suspension state, subscription expiry, device limit and personal access token.

Device registrations include a hardware identifier, client user agent, available device name, model, operating system and version, and first/last-seen timestamps. We also process hashed session tokens and expiry, request-limit counters, administrative audit events and service-message delivery records. Support correspondence contains information you choose to send.

Application delivery and network operations involve request information, which can include IP addresses and connection metadata. The data described here is account, device and operational information; it must not be confused with a record of websites visited or the content of VPN traffic.

3. Purposes and legal bases

We use account, subscription and device information to perform the service agreement: authenticate you, check access, enforce device limits, deliver configurations, manage your devices and send service or expiry notices. These notices are operational communications, not advertising.

Our legitimate interests support proportionate abuse prevention, security, troubleshooting and administrative accountability, subject to your rights and interests. We may retain or disclose information to meet a legal obligation or establish, exercise or defend legal claims. Where optional processing requires consent, we ask separately and you may withdraw it without affecting earlier lawful processing. Providing the information needed for authentication and access is necessary to use the subscription.

4. Hosting, recipients and international processing

The primary database containing account, subscription and device records is hosted in Zurich, Switzerland. This is the storage location of that database; it does not mean every authentication, support, application-delivery or network operation takes place only in Switzerland.

Access is limited to authorized administrators and providers that need information for authentication and messaging, application hosting, database storage, content delivery, security, support or VPN connectivity. We do not sell your personal data. Telegram processes sign-in and bot communications under its own terms. Your chosen VPN client receives the imported profile and client notices.

Configuration requests may send a device hardware identifier, client/device metadata and provider-specific subscription credentials to the relevant network provider. Credentials are not published on the public website. Where processing involves an international transfer, the applicable transfer rules require an appropriate legal basis, such as an adequacy decision or contractual safeguards. Switzerland benefits from an EU adequacy decision; that does not automatically cover onward transfers elsewhere. Contact us for information about recipients and relevant safeguards.

5. Cookies and external resources

The Mini Apps use an essential HTTP-only authentication cookie with a one-hour lifetime and server-side session checks. Website language is determined by the English or Russian page URL. Calculator selections remain in the current page state.

The website does not add advertising trackers or analytics. Flag images are loaded from an external visual-asset delivery service, which receives the image request and connection metadata. Opening Telegram, a VPN client, an app store or another external link subjects that interaction to the other service's privacy practices.

6. Retention and protection

We retain account, subscription and device records for as long as needed to administer your account and provide access. Support and delivery records are retained as needed to resolve the request or verify delivery; security and audit records are retained as needed to investigate incidents and protect the service. Applicable legal obligations, limitation periods and the need to resolve disputes can require longer, restricted retention. We assess necessity by the record's purpose, sensitivity and any outstanding legal or security need.

A session stops authorizing access after one hour; expiry does not itself delete its database record. On a valid erasure request, records no longer required for a lawful purpose are deleted or anonymized. Residual backup copies are subject to their normal replacement cycle and must not be used to restore erased accounts into active use. Contact us for retention information relating to your account.

We use encrypted HTTPS transport, restricted administrative access, separation of customer and administrator permissions, and hashed session credentials to protect information. Keep your Telegram account and subscription link secure. Swiss hosting and technical safeguards support data protection, but no online service can guarantee absolute security.

7. Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent for consent-based processing. Write to contact@solenevpn.com. We may request proportionate verification to prevent disclosure to someone else and will respond within the applicable statutory time limit.

You may lodge a complaint with the competent data-protection supervisory authority, including the authority where you habitually reside, work or consider an infringement to have occurred. Contacting us first is not a prerequisite for that right.

Device-limit admission is an automated technical access check. Contact us for human review of an incorrect device registration or access restriction. We do not use that check to make a legal determination about you.

8. Policy changes and contact

We will update this policy when our processing changes and show the effective date. Material changes affecting your rights will be communicated through an appropriate service channel. A policy update does not replace consent where consent is required. For privacy requests or questions about Solène data handling, contact contact@solenevpn.com.

Contact

contact@solenevpn.com