Legal
Account Deletion
You can start deleting your account from the web or from inside the app at any time. This page explains what gets erased, what is kept, how long it takes, and the subscription step you must handle first.
1. How to start
- On the web: go to the account deletion page and sign in, enter your account identifier and confirm immediate deletion. No app install needed.
- In the app: Me → Account & Security → Delete account, the same flow.
- By email: if you can no longer sign in (for example you lost your only login method), email legal@tpvpn.com with your @handle and whatever shows the account is yours. We will verify manually.
2. Two things to do first
3. Deletion options
The website provides immediate account deletion: sign in, enter your account identifier and acknowledge the irreversible action and subscription notice. It does not offer data-only deletion or a 30-day cooling-off period.
Where the app offers deletion at subscription expiry, the confirmation shows the scheduled date. You can cancel a pending schedule in the app before execution; completed deletion cannot be recovered. Scheduling or deleting an account does not cancel automatic renewal in the store.
4. What is erased, what is kept
Erased
- Profile data: @handle, country of registration, account status, internal notes.
- The link between your TP VPN account and its sign-in identity; the identity provider handles its own data under its applicable policy.
- All device records and the WireGuard public keys you registered (peer configuration is removed from nodes within minutes).
- Identifying details in session and connection records are anonymised. Retained connection records and traffic statistics follow the periods in the Privacy Policy.
- Support tickets and their messages.
- Personal identifiers in referral relationships (the referral count is kept in anonymised form so rewards other users already earned are not rolled back).
Kept, and why
| What | For how long | Why |
|---|---|---|
| Order, payment and refund records | 7 years after the transaction (or longer if tax law requires) | A statutory financial and tax duty; minimised to the fields the law requires |
| Aggregated traffic statistics | Expires naturally within 13 months | Already aggregated without identifiers and cannot be re-linked to you |
| Administrative audit trail | 3 years | It records what our staff did, append-only and immutable — it holds us accountable |
| Ban marker (irreversible hash) | Indefinite | Only where the account was terminated for a serious breach, to stop instant re-registration; contains no recoverable personal data |
| Records subject to legal process | Until proceedings conclude | Where a valid preservation obligation applies |
5. Timeline
- Before submitting: sign in, enter the account identifier and confirm immediate deletion.
- After the service confirms execution: you are signed out, VPN authorisations are revoked, and identifying information is removed or anonymised. There is no cancellation window.
- Scheduled deletion: where offered in the app, the confirmed expiry date applies. A schedule can be cancelled before execution.
Retained records follow the periods above and in the Privacy Policy. The page displays the deletion result; automatic reminder or cancellation emails are not part of this flow.
6. Verifying it is you
Deletion is irreversible, so we have to be sure the request is yours. Verification means signing in once with any login method already linked to the account — email one-time codes in the initial iOS release, and the methods actually offered on other channels. We will never ask you to upload an identity document or a selfie.
If you cannot sign in: email legal@tpvpn.com with your @handle, a recent order id or the last four digits of the payment instrument, and the domain of the email you registered with. We verify manually and, where needed, confirm through the originally linked channel.
7. Common questions
- Can I sign up again with the same email?
- Yes, unless the account was terminated for a serious breach. But it is a brand new account: no subscription, no referral history, nothing carried over. Availability of an account identifier is checked when registering.
- Can I erase only my connection history?
- There is currently no data-only self-service option on this page. Contact us for a separate data request. Note that session records expire after 90 days and connection logs after 30 days anyway, so they disappear on their own if you do nothing.
- Do you keep my browsing history?
- No — it was never collected. No browsing activity, no DNS queries, no destinations, so there is nothing of that kind to delete. See Privacy Policy §2.
Revision history
- v1.0.2 · 2026-09-08 · Aligned execution timing, cancellation and data handling with the implemented deletion flow
- v1.0.1 · 2026-09-02 · Added the Traditional Chinese (Hong Kong) translation