Privacy Pro Privacy Policy and Terms of Service

We only save the minimal personal information we need for the service to function.

To protect your identity, you do not need to create an account in order to use Privacy Pro. Instead, we assign a random ID to your Privacy Pro subscription that we use to authorize your subscription on your devices. This random ID is not connected to any of your VPN traffic or credit card information. You can optionally add an email address for ease of authorization. We will only use personal information you provide (for example, your email address if you choose to provide it) to make the service function, including for customer support and sending service notices like receipts, and for no other purpose. We do not sell any personal information.

We don't keep logs of your VPN activity.

We have no way to tie what you do while connected to the DuckDuckGo VPN to you as an individual.

We only keep anonymous performance metrics that we cannot connect to your VPN activity.

Our VPN servers store generic usage and diagnostic data (for example, CPU load and errors), but nothing connected to any individual. We use this non-identifying information for VPN performance, for example to ensure VPN servers aren't overloaded, under attack, or having network issues.

We only use dedicated VPN servers.

This means our VPN servers are not shared with anyone else. We rent our VPN servers from hosting providers carefully selected to meet our privacy requirements. Our VPN servers are also physically separated from other DuckDuckGo servers, like those used for search infrastructure.

When you enter personal information to have us remove it from data broker sites, that data is only saved on your device, not on our servers.

For example, your name, age and address are all stored locally on your device. If we find additional related information on data broker sites, like alternative names, or addresses, or the names of your relatives, this information is also only stored locally on your device, not on our servers.

The service submits removal requests to data broker sites on your behalf directly from your device, not from our servers.

This is unlike most other services where removal requests are initiated on remote servers. The only personal information we may receive in this process are confirmation emails from data broker sites, which we automatically handle for you and then delete within 72 hours. We regularly re-scan data broker sites to check the removal status of your information. If it has reappeared, we resubmit the removal request.

We partner with Iris® Powered by Generali, to provide Identity Theft Restoration.

We do not save any additional personal information when you use Identity Theft Restoration, nor do we share any personal information with Iris. In the event of identity theft, follow the instructions here to connect with Iris directly.

We do not process payments ourselves. Instead, we use third-party payment processors.

We use Apple's App Store, Google's Play Store, and Stripe for payment processing. They each collect personal information when processing payments (for example payment information) and to monitor the performance of their services (for example device information for fraud detection and analytics.) Their respective privacy policies and terms of service apply here.

We offer support at privacypro@duckduckgo.com.

If you reach out to us for support by emailing privacypro@duckduckgo.com and agree to be contacted to troubleshoot the issue, we may contact you using the email address provided. We use Khoros, a third-party system, to store and facilitate our responses to customer support requests.

We retain support emails for only as long as we need to resolve your support issue, or for other business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations.

When you cancel Privacy Pro, we promptly delete the limited personal information we have.

Depending on how you subscribe, you can cancel through Apple's App Store, Google's Play Store, or Stripe via the DuckDuckGo app. We keep backups for 30 days, so it will take 30 days from when you cancel Privacy Pro to remove any personal information we may have from our systems (for example, your email address), unless we are legally required to keep it longer.

You must agree to these terms.

These terms are a binding legal agreement between you and DuckDuckGo Subscription, Inc. By purchasing and/or using Privacy Pro, you are agreeing to these terms and the DuckDuckGo Terms of Service, which are incorporated by reference and apply to DuckDuckGo Subscription, Inc., just as if it were included as part of “DuckDuckGo” in those Terms of Service. If these terms conflict with the DuckDuckGo Terms of Service, these terms will govern.

You must be eligible.

To use Privacy Pro, you must be the age of majority in your jurisdiction and live in a location where we offer Privacy Pro. If you have been previously suspended or removed from any services offered by DuckDuckGo, you are not eligible.

You must enroll in a subscription.

You must enroll in a monthly or annual subscription (a “Subscription”) from us, which may begin with a free trial, to use Privacy Pro and you agree to provide accurate information that does not infringe on the rights of any third party when doing so.

You may not let others use your subscription.

Privacy Pro is for your personal noncommercial use only and you are solely responsible for all activities that occur through your Subscription. You may not assign your Subscription or authorize its use to others.

You must only use Privacy Pro with official DuckDuckGo browsers.

To access and use Privacy Pro, you must download and install a DuckDuckGo browser from the DuckDuckGo website or an authorized third-party app store (“Official Apps”). You may not attempt to integrate or otherwise use Privacy Pro in connection with any technology, interfaces, or builds (including those authorized by the applicable open-source licenses) other than Official Apps.

You understand the services available to you.

Privacy Pro is only available in the U.S. The services may not be available for all operating systems or their versions. We may modify the Privacy Pro services and their terms at any time in our sole discretion. If you do not wish to continue subscribing with the modifications, you may cancel your Subscription.

You understand the third-party policies applicable to your purchase.

Subscription purchases are processed and managed by either Apple's App Store, Google's Play Store, or by Stripe, and you are subject to the terms and privacy policies of the applicable third party. For Apple and Google purchases, we do not have the ability to initiate, cancel, or refund your Subscription on your behalf; you must go directly through them.

You authorize us to charge a subscription fee.

You authorize DuckDuckGo Subscription, Inc., through the applicable payment processor, to charge you the subscription fee and applicable taxes through the payment method that you provide. If your transaction cannot be processed, we may suspend or terminate your Subscription. If your subscription includes a free trial, you will not be charged the applicable fee during your free trial, but you will be required to provide a payment method to ensure uninterrupted access after the free trial ends. Unless you cancel before your free trial ends, your paid subscription will automatically begin at that time, and your payment method will be charged the applicable fee. Any free trial period is at our sole discretion, and we may limit eligibility or duration to prevent misuse. Trials and promotional subscriptions may be limited to one per household and you may also be limited in your ability to combine promotions.

You agree to automatic renewal of Privacy Pro.

By purchasing Privacy Pro, you are subscribing to an automatically renewing Subscription requiring recurring payments at the stated price (including any applicable taxes) and frequency (for example, monthly or annually) until you cancel. Privacy Pro will automatically renew at the beginning of each billing cycle. If the Subscription includes a promotional rate, you will be charged the promotional rate for the relevant number of billing periods and then will automatically renew at the then-applicable full rate.

You may cancel Privacy Pro at any time.

You can cancel Privacy Pro at any time before the end of your free trial or before your next renewal by going to Settings in the DuckDuckGo app and following the link to cancel or, for Subscriptions purchased through a third-party app store, through that third party. If you cancel, your right to use Privacy Pro will continue until the end of the current billing period and will then terminate without further charges. Except as required by applicable law, you will not receive a refund.

You agree to use Privacy Pro as authorized.

You agree to comply with the DuckDuckGo Acceptable Use Policy, which is incorporated by reference. We reserve the right at any time and in our sole discretion, with or without notice, to suspend and/or terminate your access to Privacy Pro (or portions thereof) for any reason, including for violation of these terms or applicable laws, whether repeated violation or a single instance.

We will notify you when our Privacy Policy or Terms are updated.

We will notify you of changes by posting the modified version at https://duckduckgo.com/pro/privacy-terms. We will indicate the date it was last modified below with an update message on top if substantive changes were made. Continuing to access or use Privacy Pro after any changes constitutes your consent and agreement to any new terms.