This document is a public offer and terms of use for the EvilFox.Win service, prepared with regard to European Union requirements (including consumer rights, digital content, and e-commerce directives, GDPR — where applicable) and United States of America requirements (including FTC consumer protection norms and state laws such as CCPA/CPRA). Registration, payment, and use of the service constitute acceptance of the offer.
Provider — the owner of the EvilFox.Win service, providing VPN access services, not a resident of the Russian Federation and having no representations, branches, or separate subdivisions in the Russian Federation. Customer (user, consumer) — a legally capable natural person or legal entity that has accepted the offer by registering and/or paying. Services (the Service) — provision of access to VPN configurations and related digital account features under the selected tariff. Digital content — subscription, access link, and other data issued in electronic form.
The Provider is not subject to Russian law governing VPN services, telecom operators, or circumvention of internet blocks. The Provider's status is determined by its place of registration and the contacts in section 2; applicable law is set out in section 16. Payment in rubles, a Russian-language interface, or Customers located in the Russian Federation do not by themselves mean that the Provider is a Russian person or is subject to Russian VPN regulation.
Before entering into the agreement and for any performance matters:
Full list: Contacts.
The Provider undertakes to grant the Customer VPN access in accordance with the paid tariff; the Customer undertakes to pay for services at prices indicated on the website at the time of purchase. The service constitutes digital content, not supplied on a tangible medium, provided remotely (online).
Essential service characteristics (term, price, traffic and device limits, server list) are indicated on the tariff page before payment. Additional VPN usage terms — in the VPN usage rules and site rules.
The agreement is concluded remotely. The Provider is not a Russian telecom operator and does not provide VPN services as a person supervised by Russian regulators. The subject of the agreement and the terms of service are not governed by Russian Federation law on VPNs; mandatory Russian rules on circumvention tools do not apply to the Provider.
The agreement is deemed concluded from the moment of:
Posting tariffs on the website constitutes an invitation to treat; acceptance is the Customer's action of paying for the selected tariff.
The Customer registers, tops up balance (if needed), and purchases a subscription in the account dashboard. Access is granted immediately after successful payment: configuration and subscription link are displayed in the dashboard. No separate delivery fee is charged. Details: Delivery Terms.
The subscription term is calculated per the tariff (calendar days/months), unless freeze mode before activation is enabled — in that case, the term begins from the activation moment indicated on the website.
Prices are indicated on the website before placing an order (price transparency principle — EU/US consumer law). Payment is possible via methods available in the account dashboard; payment processing is carried out by payment providers under their rules. The Provider does not store full bank card details.
Display currency — at the Provider's discretion (typically rubles); the actual debit amount may depend on exchange rate and payment system fees. VAT: if the Provider is not a taxpayer in the relevant jurisdiction, the price may be shown without a separate tax line; for EU consumers, applicable tax obligations are determined by law and the Provider's status.
For consumers in the European Union, the right to withdraw from a distance contract within 14 calendar days without giving reasons applies (Directive 2011/83/EU), unless otherwise provided below.
VPN access is digital content not supplied on a tangible medium. When placing an order, the Customer:
Refunds after use begins — per refund terms, within mandatory EU consumer protection law.
For consumers in the United States, the refund and payment cancellation terms and mandatory rules of the state of residence apply (including California residents' rights under CCPA/CPRA regarding personal data — see the policy).
Digital services with instant delivery are, as a rule, not refundable after actual connection and use, except as expressly provided in refund.php, erroneous duplicate charge, or where mandatory under applicable law.
The Provider defines permissible use of services based on EU and US law (see VPN rules). Legislation of countries with authoritarian or censorial internet regulation (including the Russian Federation and Ukraine) is not a reference framework for these offer terms.
The Customer undertakes to:
Use of the Service is prohibited for:
The Customer independently assesses the risks of using the Service in their country of location, including any local restrictions or bans on VPN. The Provider does not guarantee legality of VPN in all jurisdictions worldwide.
The Provider does not guarantee availability of the Service in states where VPN services are restricted or prohibited (including, without limitation: the Russian Federation, the People's Republic of China, the Islamic Republic of Iran, the DPRK, and other countries with authoritarian internet regulation). Blocks at the level of a state, telecom operator, or regulator are outside the Provider's control. The Customer independently assesses such risks and bears the related consequences.
Data processing is carried out per the Personal Data Processing Policy (GDPR, ePrivacy, CCPA/CPRA — where applicable). Registration and payment confirm acknowledgment of the policy. The Customer may exercise data subject rights via profile and support.
The Provider strives to maintain VPN operability, but the service is provided "as is" and "as available" to the extent permitted by mandatory EU and US law.
Not guaranteed: uninterrupted availability, specific speed, availability of particular websites or services, bypassing all operator and government blocks. Maintenance, provider failures, and force majeure may affect access.
For EU consumers: nothing in this offer limits statutory conformity guarantees for digital content under Directive (EU) 2019/770, to the extent applicable to the nature of the service.
The Provider is released from liability for non-performance or improper performance of obligations upon occurrence of circumstances of force majeure, including without limitation: natural disasters; military operations and armed conflicts; internet blocks at the state level; decisions of regulators, courts, and public authorities; datacenter, connectivity, and infrastructure-provider outages; cyberattacks; and other events beyond the Provider's reasonable control.
The Provider does not guarantee availability of the Service in states where VPN services are restricted or prohibited (including, without limitation: the Russian Federation, China, Iran, the DPRK, and other countries with authoritarian regulation). Such restrictions are circumstances beyond the Provider's control. The Customer independently assesses the risks of using the Service in their country.
The Provider is not liable for: actions of the Customer and third parties; content of user traffic; VPN blocks at government and provider level; indirect damages, lost profits, data loss — to the maximum extent permitted by applicable law.
The Customer bears full responsibility for use of the Service, including any legal consequences in the country of their location. The Provider does not control and is not liable for content transmitted through the Service by the Customer, nor for the Customer's choice of purposes, applications, or resources when using the VPN.
Aggregate Provider liability under the agreement is limited to the amount actually paid by the Customer for the disputed subscription over the last 12 months, unless otherwise required by mandatory EU/US consumer protection rules.
Limitations do not apply to liability for intent, gross negligence, harm to life and health, and other cases where liability cannot be excluded by law.
Services are not provided to persons and organizations subject to US (OFAC), EU, or other mandatory sanctions regimes. The Customer confirms absence of such restrictions. The Provider may immediately terminate the agreement upon violation.
The Provider may suspend or terminate access for violation of the offer, rules, EU/US law, resource abuse, non-payment, or at payment provider request. Permanent suspension for serious violations — per site rules.
The Customer may cease use at any time and delete the account via the dashboard (right to erasure, Art. 17 GDPR — see the privacy policy and refund terms, section 11). After deletion, restoration of access is not possible. Unused prepaid period is not refundable, except as per the refund terms and mandatory law.
The Provider may change the offer, prices, and tariffs. The current version is published on this page. Notice of material changes for active subscriptions may be sent (website, email). Continued use after changes take effect means consent, unless prohibited by applicable law. For EU consumers: changes do not worsen already paid rights without consent during the paid tariff period.
The agreement is governed by law determined in accordance with mandatory conflict-of-law consumer protection rules: for consumers residing in the EU/EEA, mandatory rules of their habitual residence country are preserved if more favorable.
For consumers in the United States — mandatory rules of the state of residence to the extent required by law.
Disputes are resolved through negotiation and contact with support. If no agreement is reached:
Nothing in this section deprives the consumer of the right to judicial protection under mandatory rules of their country.
The offer is effective from publication on the website. Invalidity of a separate provision does not render the offer invalid as a whole. Integral documents: site rules, VPN rules, privacy policy, delivery, refund.
Home · Contacts · Delivery · Refunds and cancellation · Privacy policy · VPN rules