Site: https://honestvpnguide.com/
Published by: LiBrAi, as Honest VPN Guide (see the Legal Notice)
Effective date: 10 November 2026

This policy explains how personal information is handled when you read Honest VPN Guide or contact us. We collect only what we need to run the site and answer emails.

Who is responsible

  • Data controller: LiBrAi, a Dutch sole proprietorship (eenmanszaak), KvK 42049145.
  • Privacy / reader contact: info@honestvpnguide.com.
  • Data protection officer: LiBrAi has not appointed a separate data protection officer. Use the privacy contact above for privacy questions and requests.

Information and purposes

Activity Information involved Purpose and legal basis Retention
Site delivery and security Technical request data that a WordPress site on STRATO hosting typically records (for example IP address, requested URL, time, and browser or device information in server or security logs) Deliver pages, keep the site working, troubleshoot faults, and prevent abuse — legitimate interests in a working, secure site Kept for security and troubleshooting under the host’s retention settings, then deleted or anonymised; see Retention below
Reader correspondence Email address, optional name, message content, and any material you choose to send to info@honestvpnguide.com Reply to queries, investigate corrections, and prevent abuse — legitimate interests in handling correspondence Kept while we handle your request and up to 12 months after the thread is closed, unless a longer period is required for a legal claim or a binding legal obligation
Account registration We do not offer reader accounts Not applicable Not applicable

You can read editorial pages without sending us a message. Contact is by email to info@honestvpnguide.com. There is no public contact form on the site. Please do not send passwords, identity documents, payment details, or sensitive personal information in ordinary correspondence.

We do not use a separate consent-preference tool, analytics product, or affiliate-attribution tool on the pages we checked. If that changes, this policy will be updated before those tools start.

Cookies, analytics and embeds

As of 10 November 2026, on https://honestvpnguide.com/:

Page Cookies observed
Homepage (/) None
WordPress login (/wp-login.php) wordpress_test_cookie — a WordPress cookie used to check whether the browser accepts cookies on the login form (Secure; HttpOnly)

No analytics or advertising cookies were observed on those pages. The site does not present a separate cookie-preferences control, because the only cookie we list above is the WordPress login test cookie. Browser settings can still block cookies; the login page is for the site administrator only; blocking cookies does not stop you reading the site.

We do not embed third-party videos, social widgets, or similar third-party embeds on the pages listed above. If embeds are added later, this section will be updated first.

WordPress includes a small emoji script. If your browser cannot display emoji itself and a page contains an emoji, that script can load the emoji image from an external WordPress image server (s.w.org), which then receives your IP address. This does not set a cookie on honestvpnguide.com.

Comments and avatars

We have switched comments off on this site, so we do not show avatars or load images from Gravatar.

Affiliate links and other websites

Honest VPN Guide is not part of any affiliate program. If a program is approved later, some links may become affiliate links; our Advertising and Affiliate Disclosure explains how that works.

When you follow an external link, that destination receives information needed for the connection, such as your IP address, and may receive referral information depending on browser and site settings. An affiliate network or merchant may use its own identifiers or cookies under its own policy. That is separate from cookies on honestvpnguide.com. External websites have their own policies; we do not control their processing.

Service providers and recipients

We share personal data only with the providers and recipients below, for the purposes described above, or where the law requires us to.

  • Hosting: STRATO GmbH hosts the site. According to STRATO’s own site (checked 10 November 2026), customer data is stored in STRATO’s own data centres in Germany, with mirroring between Berlin and Karlsruhe. See “International transfers” below for a possible subprocessor outside the EEA.
  • Site software: The public site runs on WordPress with the Extendable theme on STRATO hosting. Host-bundled WordPress plugins are installed for site administration. A logged-out check of the homepage on 10 November 2026 loaded only scripts from honestvpnguide.com itself: WordPress and theme scripts, with no separate analytics or advertising scripts (see the emoji note above). We will name any plugin that processes readers’ personal data, and its purpose, before that processing starts.
  • Email: The mailbox info@honestvpnguide.com is hosted by STRATO, which says it stores email data only in its own data centres in the EU (checked 10 November 2026). LiBrAi also forwards a copy of incoming messages to a Microsoft Outlook.com consumer mailbox that LiBrAi uses to read site email. Microsoft processes that copy under its own privacy statement, which says personal data may be stored and processed in the account holder’s region, in the United States and in any other country where Microsoft or its affiliates operate facilities (checked 10 November 2026).

We may also need to disclose information to comply with a valid legal requirement or to establish or defend legal claims, limited to what is necessary.

International transfers

The site is hosted with STRATO. STRATO states that hosting data is stored in Germany (EEA). STRATO’s data processing agreement lists SiteLock, LLC (USA) as a possible subprocessor for malware detection, with EU standard contractual clauses as the safeguard (checked 10 November 2026). LiBrAi operates from the Netherlands.

Because a copy of each message to info@honestvpnguide.com is forwarded to a Microsoft Outlook.com mailbox, your email may be processed outside the EEA, including in the United States. Microsoft states that it complies with the EU-U.S. Data Privacy Framework (checked 10 November 2026). If you prefer not to use email, you can also write to us by post at the address in the Legal Notice.

We do not use a separate analytics or advertising vendor on the public pages checked on 10 November 2026. If a future tool, plugin, or mailbox change transfers personal data outside the EEA, we will name the destination and the safeguard (for example an adequacy decision or standard contractual clauses) in this policy before that transfer starts.

Retention and security

Retention:

  • Server and security logs: STRATO states that it stores the IP addresses of visitors in its server logs for at most seven days to detect and fend off attacks, after which they are anonymised (per STRATO’s GDPR FAQ, checked 10 November 2026).
  • Reader email: kept while we handle your request and up to 12 months after the thread is closed, unless a longer period is required for a legal claim or a binding legal obligation. That 12-month limit is LiBrAi’s own policy for this site and applies to both the STRATO mailbox and the forwarded copies, not a figure published by a mail provider.
  • Backups: STRATO’s help pages describe automatic website backups kept for up to four weeks and daily database backups kept for up to 14 days (checked 10 November 2026). Deleted data may remain in those backups until they expire.

We use access controls and HTTPS transport appropriate to a standard WordPress site on STRATO hosting. No internet service can promise absolute security.

Your rights

Depending on the circumstances, the GDPR gives you rights to access your personal data, correct it, request erasure, restrict processing, object to processing, and receive or transfer data where portability applies. Where processing relies on consent, you may withdraw that consent. You can object to direct marketing at any time; objections to legitimate-interest processing depend on the applicable conditions.

Use info@honestvpnguide.com to exercise your rights. We may ask for proportionate information to confirm who is making a request; do not send identity documents unless a necessary, secure process has been agreed. We respond without undue delay and within one month. If requests are complex or numerous, that period can be extended by up to two more months; we will tell you within the first month, with the reason.

You may complain to a supervisory authority, including one in the EEA country where you live, work, or believe an infringement occurred. In the Netherlands, see the Autoriteit Persoonsgegevens. You do not have to contact us first.

Automated decisions, marketing and children

We do not use automated decision-making or profiling that produces legal or similarly significant effects about you.

We do not currently run a newsletter or other direct-marketing list on this site.

This site is written for adults. If you think a child has sent us personal information, contact us and we will delete it where appropriate.

Changes

The effective date at the top identifies the current version. We will explain material changes here and, where the law requires it, tell you before a new use of personal data begins.

Related pages: Legal Notice · Advertising and Affiliate Disclosure.