Privacy Policy

This English version is provided for convenience. If it differs from the Traditional Chinese version, the Chinese version prevails.
Last updated: November 11, 2026

天野手創工作室 (Tianye Handcraft Studio, “we” or “us”) explains below, in line with Taiwan’s Personal Data Protection Act, how ELH VPN Cloud collects, processes and uses your personal data.

1. Data we collect

Category	What	Why
Account	Email, password (stored only as a hash), email verification status	Sign-up, log-in, notifications
Devices	Device name, platform (Android, Chrome, etc.), WireGuard public key or the extension’s random device ID, the internal tunnel IP we assign, last-used time	Device authorization, one-connection-at-a-time control
Connections and usage	Connection start/end times, server used, bytes transferred (up/down), free-quota usage	Billing, quota control, abuse prevention, support
Orders and payments	Order number, plan, amount, currency, payment method, payment provider transaction ID, payment/refund/dispute status	Fulfilling orders, refunds, accounting and tax
Security records	Type and time of unusual events and the requesting IP address (e.g. failed log-ins, payment anomalies, unauthorized usage)	Information security, fraud and abuse prevention
Web server logs	Access logs kept by our hosting (IP, time, URL, browser information)	Website operation and security

Data we do not collect

• The websites you visit through the VPN, destination IPs, the content you transfer, or your DNS queries. Our server software reports only byte counts per device, never destinations or content.
• Card numbers, expiry dates or security codes: these are handled by ECPay or PayPal and we cannot access them.
• Our servers do not report the IP address you connect from to our control center.

Chrome secure browsing (extension)

The extension has a single purpose: letting you use your ELH VPN Cloud account to route this Chrome browser’s traffic through our encrypted servers with one click. It protects browser traffic only; it is not a full-device VPN.

Data	Stored where	Purpose
Log-in token (revocable; not your password)	Extension storage on your computer	So you don’t need to enter your password each time; invalid after logging out or using “Log out of all devices” in the member center
Randomly generated device ID, device name “Chrome browser”	Extension storage and our servers	Device management (removable in the member center), one connection per account
Temporary pass (valid about 15 minutes)	Browser session storage only; cleared when the browser closes	Lets the encrypted server confirm the connection is yours
Connection periods and bytes transferred	Our servers	Deducting daily free quota and pack data
Remaining quota, connection status	Extension storage	Showing them on screen

• The extension does not store your password; it is sent over HTTPS to our server only when you log in.
• The extension does not read or modify web pages, injects no scripts and does not record the URLs you visit or what you search.
• While connected, this browser’s traffic is relayed by our servers. To relay it, the server must know which site to connect to, but it does not log it; the content of HTTPS sites is encrypted by the site and we cannot see it. The server reports only byte counts per connection.
• For security, if one source fails authentication many times in a short period, the encrypted server temporarily blocks that IP and records the IP and time (abuse prevention).
• While connected, the extension sets Chrome’s WebRTC policy to use only the encrypted connection, so websites cannot learn your real IP through WebRTC; the setting is restored when you disconnect.
• We do not sell or transfer this data or use it for advertising or any unrelated purpose. The extension’s use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
• Removing the extension deletes its data on your computer; data on our servers is kept and deleted as described in section 2.

2. Retention, location, recipients and use

• Retention: for as long as your account exists. After account deletion, transaction and accounting records are kept for the periods required by Taiwan’s Business Entity Accounting Act (accounting vouchers at least 5 years); usage and security records are deleted or de-identified after 12 months.
• Location: our website host and VPN servers are in the United States (Ashburn, Virginia).
• Recipients: us; payment providers (ECPay, PayPal), limited to data needed for the transaction; hosting and server providers (infrastructure only, not permitted to use the data); authorities with legal power to request it.
• We do not sell your personal data or share it with advertisers.

3. Cookies

Our website uses the cookies WordPress needs for logging in, plus a cookie that remembers your language choice. We do not use third-party advertising or tracking cookies; if we add analytics in the future, we will update this policy.

4. Your rights

Under Article 3 of the Personal Data Protection Act you may ask to access, review or get a copy of your data, supplement or correct it, or ask us to stop collecting, processing or using it, or to delete it. Use “Request account deletion” in the member center or email support@easylifehub.net. We will respond within 7 working days, except for transaction records we are legally required to keep.

5. Security

HTTPS in transit, password hashing, encrypted storage of payment keys, signed requests between servers and the control center, and access controls.

6. Requests from law enforcement

We provide data only in response to requests made through proper legal process, and can only provide the data we actually keep as described above.

7. Changes to this policy

We will post changes on our website and notify you by email of material changes.

8. Contact us

天野手創工作室 (Tianye Handcraft Studio) · support@easylifehub.net · No. 1, Ln. 1, Jixiang 8th St., Yichang Village, Ji’an Township, Hualien County, Taiwan