Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
TunnelBear's privacy policy states that your continued use of their services after updates signifies your acceptance of changes (risk_flags-1). They note that payment processors might store your financial data outside Canada (risk_flags-2), and that TunnelBear may not always be able to delete all your personal data, such as for legal reasons or during litigation (risk_flags-3). Additionally, your last name and the last four digits of your credit card may be stored for fraud prevention.
92% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
3 findings
Clauses that indicate potential risks or significant obligations for the user.
medium95% confidence
User acceptance of privacy policy changes through continued use
Continued use of services after updates to the Privacy Policy constitutes acceptance of those changes.
Why it matters: You automatically agree to any changes in the Privacy Policy if you continue using the services after an update, even if you are not directly notified of the changes beyond an online posting.
We may need to change our Privacy Policy from time-to-time and all updates will be posted online. Your continued use of our Services after the effective date of such changes constitutes your acceptance of such changes.
Payment processors may store personal data outside Canada
Credit card processors used by TunnelBear may store personal data associated with financial transactions outside of Canada's borders.
Why it matters: Your financial transaction data, including personal data, might be stored by third-party payment processors in locations outside of Canada.
Credit card processors may store Personal Data associated with financial transactions outside of Canada's borders.
1.4 Personal and Financial Data Collected at Payment, paragraph 1 · Citation strength: strong
medium85% confidence
Possible inability to delete all personal data
TunnelBear may be unable to delete all personal data in certain circumstances, such as when legally required to keep it or if involved in litigation.
Why it matters: Even if you request deletion of your personal data, TunnelBear might not be able to delete all of it if there's a legal requirement to retain it or if you are involved in litigation with them.
TunnelBear makes good faith efforts to provide you with the ability to delete your Personal Data, however there may be circumstances in which TunnelBear is unable to delete all your Personal Data. For example, we are unable to delete it where we are legally required to keep it, including where we need it to continue to offer you the service or if you are involved in litigation with us, we would be required to retain your personal data, which is limited to the fields we discuss above in 1.2 , 1.3 and 1.4 .
2.2 Disclosure of Personal Data to Third Parties, paragraph 3 · Citation strength: strong
Data Use & Sharing
All clear
How your data is collected, used, and shared with others.
✓
Looking good
No data-use concerns flagged
Verbaterm only flags concerns it can cite. No source-backed data-use findings are shown here.
Cancellation & Renewal
Not clearly stated
Terms related to how you can cancel the service, and how renewals are handled.
?
Not clearly stated
No cited billing terms — wording is unclear
No specific information about automatic renewal was found in the provided text.
Gotchas
All clear
Potentially overlooked clauses that could be unfavorable to the user.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
5 findings
Commitments and features that protect user rights and privacy.
Protection95% confidence
Commitment to minimal data collection
TunnelBear strives to collect only the minimum amount of information necessary to operate its service.
Why it helps: This commitment helps protect your privacy by ensuring that the service does not gather more personal data than is essential for its function.
As a provider of an online privacy service, we ultimately strive to collect the minimal amount of information required to operate our service.
Personal Data Collection and Use, paragraph 1 · Citation strength: strong
Protection95% confidence
No logging of sensitive VPN activity data
TunnelBear explicitly states that it does not collect, store, or log IP addresses upon service connection, DNS queries while connected, or information about applications, services, or websites used while connected to their service.
Why it helps: This ensures that your online activities while using the VPN are not recorded, offering a higher degree of privacy and anonymity.
TunnelBear explicitly does NOT collect, store or log the following data: IP addresses visiting our website IP addresses upon service connection DNS Queries while connected Any information about the applications, services or websites our users use while connected to our Service
1.6 Other Data TunnelBear Just does NOT Collect, paragraph 1 · Citation strength: strong
Protection95% confidence
No sale or trade of personal data for commercial purposes
TunnelBear will not sell or trade personal data for commercial purposes.
Why it helps: This prevents your personal information from being monetized by third parties, enhancing your privacy.
TunnelBear will NOT sell or trade Personal Data for commercial purposes.
2.2 Disclosure of Personal Data to Third Parties, paragraph 3 · Citation strength: strong
Protection90% confidence
Deletion of account data upon cancellation or request
Unless legally required to keep it, TunnelBear will delete account data within 30 days of subscription cancellation or upon user request through their privacy center.
Why it helps: This allows you to control the retention of your personal data after you stop using the service, giving you the ability to have your data removed.
Unless legally required to keep it, we will delete your account data on the earlier of 1) 30 days after you cancel your subscription or 2) when you request deletion through our privacy center ; see section 2.11 for more information on how you can request that we delete your data.
2.2 Disclosure of Personal Data to Third Parties, paragraph 3 · Citation strength: strong
Protection95% confidence
User rights to access, rectify, and erase personal data
You have the right to inquire about, access, rectify, amend, or delete your personal data held by TunnelBear.
Why it helps: This empowers you to manage and control your personal information, ensuring its accuracy and allowing you to request its removal.
You have the right to inquire as to whether TunnelBear is Processing Personal Data about you, request access to Personal Data, and ask that we correct, amend or delete your Personal Data where it is inaccurate.
2.2 Disclosure of Personal Data to Third Parties, paragraph 3 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.