Terms of Service

These Terms of Service (the "Terms") are an agreement between you and InFlux Technologies LLC ("we", "us"), which develops CumulusVPN and sells CumulusVPN Premium. They cover the CumulusVPN apps, the web app at vpn.cumulusvpn.com, this website, and access to the VPN gateways the apps connect you to (together, the "Service"). We have kept them short and in plain language. By using the Service you agree to these Terms; if you do not agree, please do not use it. What we do and do not collect is explained in our Privacy Policy, and nothing in these Terms changes it. Section 16 contains an arbitration agreement and a class-action waiver that affect how disputes are resolved.

Questions about these Terms: info@cumulusvpn.com
Abuse reports: info@cumulusvpn.com

---

1. Summary (the short version)

• The free tier is free. No account, no email, no payment details. Just a speed limit.
• Premium is paid time for one key. It belongs to that key's anonymous payment code, not to a person, an account or a particular device, and every payment becomes a transaction on the Flux blockchain that cannot be reversed.
• Your key is your identity, so look after it. There is no account to recover. If you lose your key and every backup of it, premium time paid to it cannot be restored.
• Use it lawfully. No illegal activity, no abuse, no spam, no attacks, and never anything involving the sexual abuse or exploitation of children.
• No uptime guarantee. The network is decentralized: gateways and countries come and go, and speeds vary.
• A VPN, not an invisibility cloak. CumulusVPN protects your traffic from your local network and your internet provider. It is not anonymity software like Tor.

2. Who we are and what these Terms cover

CumulusVPN is developed by InFlux Technologies LLC, 651 N Broad St, Ste 205 #9147, Middletown, DE 19709, USA. We write and publish the CumulusVPN software and deploy the open-source gateway software to the Flux decentralized cloud network (runonflux.io). The VPN exit servers ("gateways") run as containers on Flux nodes that are owned and operated by independent third parties. We do not own, host or rent those machines, we have no physical or administrative access to them, and their operators are not our employees, agents or contractors. We do not operate the Flux network or its blockchain. We do run this website, the web app and the payment service that turns card payments and vouchers into premium time.

Some parts of the Service involve other companies, whose own terms also apply to you: Apple or Google if you subscribe through the App Store or Google Play, Stripe if you pay by card on the web, and your wallet provider if you pay in FLUX. These Terms work alongside our Privacy Policy, which explains what we do and do not collect.

The source code of the CumulusVPN apps and gateway software is public, published under the MIT License at github.com/RunOnFlux/cumulusvpn, so anyone can read what it does. That licence governs what you may do with the code; these Terms govern your use of the Service.

The gateways carry traffic automatically, as a mere conduit: we do not initiate your transmissions, choose who receives them, or select or modify their content, and the gateway software is built to keep no record of them (see our Privacy Policy).

3. Who can use CumulusVPN

• You must be at least 13 years old, or the minimum age of digital consent in your country if that is higher.
• If you are under the age of majority where you live, you may use the Service only with the permission of a parent or legal guardian, who agrees to these Terms on your behalf and is responsible for any purchase you make.
• You must be able to enter into a binding contract with us, and you must not be barred from using the Service by any law that applies to you, including sanctions and export-control laws.
• Some countries restrict or prohibit the use of VPNs. You are responsible for making sure your use of the Service is lawful where you are.

4. The Service

4.1 Free tier

The free tier costs nothing and needs no account, no email and no payment details. Its speed is limited (currently to 100 KB/s) so that it can stay free and is hard to abuse. Every country and every gateway is available on the free tier.

4.2 Premium

Premium raises the speed limit for one key, on every gateway at once, for the time you have paid for. If you restore the key on another device with its recovery key, the premium goes with it; it is meant for one device at a time, and devices using the same key on the same gateway disconnect each other. Actual speeds depend on the gateway you use, the network in between and your own connection, and are not guaranteed.

4.3 Changes to the Service

CumulusVPN is under active development. We may add, change or remove features, gateways, countries, connection methods and limits, including the free tier's speed limit, for example as the network grows or to deal with abuse.

4.4 What a VPN can and cannot do

CumulusVPN encrypts your traffic between your device and the gateway and lets you choose the country it leaves from. That protects you from snooping on your local network, from logging by your internet provider, and from some geo-restrictions. It is not anonymity software like Tor: websites can still recognize you through logins, cookies and browser fingerprinting, a gateway operator can see encrypted flow metadata in real time (see section 4.6 of our Privacy Policy), and no VPN can protect a device that is already compromised. Some websites and services block VPN traffic, and we do not guarantee access to any particular one. Traffic leaves the gateway for the wider internet just as it would leave your own connection, so use end-to-end encryption such as HTTPS for anything sensitive.

5. Your key and Device code (there is no account)

CumulusVPN has no accounts. The first time you open an app or the web app, it generates a WireGuard key pair on your device. The public key, and the payment code derived from it (shown as the Device code under Settings → About in the app), are how the Service recognizes your key. Premium time belongs to that code, whichever device holds the key, including a device you restore it on with its recovery key.

That makes you responsible for:

• Keeping your key safe. The apps keep an encrypted backup of your key by default (see section 4.1 of our Privacy Policy). You are responsible for that backup, for any recovery key you keep, and for any device that holds your key. Anyone who has your key can use the premium time attached to it.
• Not losing it. We never see your private key, so we cannot recover, reset or reissue it. If you lose your key and every backup of it, or regenerate or delete it, premium time already paid to its code stays with that code. An active card or app-store subscription can be moved to a new device for the rest of its billing period and future renewals, within the limits shown in the apps and on the upgrade page.
• Paying for the right device. If you pay for another device, check its Device code before you pay. A mistyped code can still be valid, and a payment made to it cannot be reversed.

6. Premium, prices and payment

You can buy premium in any of the ways below. Prices are shown before you pay. We may change prices for future purchases; a price change never affects premium time you have already paid for, and if we change the price of an existing card subscription we will tell you before the new price applies, so that you can cancel first.

6.1 Paying in FLUX

Premium paid in FLUX costs $0.99/month. You pay from your own wallet. Before you send anything, the upgrade page at vpn.cumulusvpn.com, or an app that offers FLUX payment, shows the exact FLUX amount for a month, our payment address and the message to include. A month's amount adds 30 days of premium; you can pay for several months at once, and paid time stacks up to 24 months. A payment grants premium only if it carries your exact CVPN1: code and covers at least one day. If yours did not, email us the transaction id and your Device code and we may, at our discretion, credit it by hand once you prove you hold the key. The FLUX amount for a month may be adjusted as the FLUX exchange rate moves; an adjustment never changes what an earlier payment granted. FLUX payments are one-off: nothing renews, and there is nothing to cancel.

6.2 Paying by card

On the web you can subscribe for $1.99/month or $14.99/year by card, or by another payment method Stripe offers at checkout. Checkout is handled by Stripe, which holds your payment details under its own terms; we never see your card. Card subscriptions renew automatically at the end of each billing period until you cancel, and by subscribing you authorize us, through Stripe, to charge the price shown at the start of each new period. You can cancel, update your card or switch between monthly and yearly at any time under "Your subscription" on the upgrade page, or from the link in your Stripe receipt email. A cancellation takes effect at the end of the period you have already paid for: you keep premium until then and are not charged again. Plan switches are prorated, and the premium time we grant reflects what you actually paid.

6.3 Subscribing through the App Store or Google Play

Where the iOS or Android app offers a subscription, it is sold, billed and renewed by Apple or Google at the price shown in the store, under their terms. You manage and cancel it in your App Store or Google Play account settings, and refunds are decided by Apple or Google under their own policies. If you downloaded the app from Apple's App Store, Apple's standard Licensed Application End User License Agreement also applies to your use of the app.

6.4 Vouchers and promo codes

We sometimes issue voucher codes. A free-time code adds the stated number of days of premium to the key (payment code) that redeems it; a discount code lowers the price of a card checkout. Each key (payment code) can redeem a given code once, and codes can expire or run out. Codes have no cash value, cannot be exchanged for money and may not be sold. Days granted by a voucher are settled on-chain like any other payment and stay with the key that redeemed them.

6.5 How premium is delivered, and why it cannot be undone

However you pay, premium is delivered the same way: as a FLUX transaction on the Flux blockchain that grants premium time to your device's anonymous payment code. When you pay in FLUX you send that transaction yourself; when you pay by card, through an app store or with a voucher, we send it for you. Every gateway reads the blockchain, so premium usually switches on within about a minute of the transaction confirming, on all gateways at once, although confirmation times are outside our control. Blockchain transactions are public and permanent: once premium time has been granted, it cannot be reversed or taken back on-chain, by you or by us.

6.6 Refunds

Premium time is delivered as soon as your payment settles, and by paying you ask us to start providing it straight away. Because it is granted on-chain and cannot be taken back, payments are non-refundable except where the law requires otherwise; where the law gives you a right to withdraw from a purchase, you agree, to the extent the law allows, that this right ends once delivery has begun. If you think you were charged in error, email us and we will look into it. If a card payment is refunded, or you dispute it with your bank or card issuer, we may cancel the subscription it belongs to so that it does not renew. Refunds for App Store and Google Play purchases are handled by Apple and Google under their own policies.

7. Acceptable use

You may use CumulusVPN for any lawful purpose. Our gateways run on hardware owned by independent operators, so abuse harms them and every other user of the network. You must not use the Service to:

• break any law that applies to you or to us, or help anyone else to do so;
• create, access, store or share child sexual abuse material, or groom, exploit or harm children in any way;
• send spam or other unsolicited bulk messages (outgoing email ports are blocked on our gateways for this reason);
• attack, scan, probe or disrupt any system or network, including denial-of-service attacks, unauthorized access, credential stuffing, and spreading malware or running botnets;
• commit fraud, phishing, identity theft or payment fraud, or harass, threaten or defame anyone;
• infringe copyright, trademarks or other intellectual-property or privacy rights;
• interfere with or overload the Service, its gateways or the Flux network, or get around its speed limits, payment checks or other technical restrictions;
• resell, rent out or share the Service as part of a commercial offering without our written permission.

To keep the network usable, we may limit or block ports, protocols or connection rates, and refuse or disconnect keys, payment codes or gateways that are being used for abuse or that put the network at risk, without notice.

We keep no activity logs (see our Privacy Policy), so we generally cannot link abuse to a particular user, and nothing in these Terms changes that. We do not monitor how the Service is used and have no obligation to do so. You alone are responsible for everything sent through the Service with your key, and for complying with the laws that apply to you. Please report abuse to info@cumulusvpn.com.

8. Availability

The Service runs on a decentralized network. Gateways are hosted by independent operators and can go offline, restart, move or be withdrawn at any time; countries come and go as operators join and leave; and the Flux network and blockchain are outside our control. When a gateway restarts, its in-memory state is cleared, and you may need to reconnect or, for a WireGuard configuration downloaded from the web app, generate a new one.

We therefore provide the Service without any uptime or availability guarantee and without service credits. We do not promise that any particular gateway, country, speed or feature will be available, or that the Service will be uninterrupted or error-free. We may suspend all or part of the Service for maintenance, security or legal reasons.

9. Third-party services

The Service relies on things we do not run: the Flux network and blockchain, the independent operators that host gateways, your wallet, the WireGuard app if you import a configuration into it, Stripe, Apple and Google. They are governed by their own terms and policies, and we are not responsible for their acts, omissions, availability or security. Transactions you send from your own wallet are public and cannot be reversed, so check the address, amount and message before you send (see section 5 of our Privacy Policy).

10. Intellectual property

The CumulusVPN name and logo and the content of our websites belong to us. Source code we publish under the MIT License is yours to use under that licence, but these Terms do not give you any right to use our name or logo. If you send us feedback or suggestions, we may use them without any obligation to you.

11. Suspension and termination

You can stop using the Service at any time: disconnect, delete your key or uninstall the app, and cancel any card or app-store subscription so that it does not renew.

We may suspend or end your access to all or part of the Service, for example by refusing a key, if you break these Terms, if the law requires it, or to protect the Service, gateway operators or other people. If we end your access because you broke these Terms, you are not entitled to a refund for premium time you have not used. If we stop offering the Service altogether, we will announce it on this website where we reasonably can and stop renewing card subscriptions.

Sections 6.5, 6.6 and 10 to 17 continue to apply after your use of the Service ends.

12. Disclaimers

The Service, including its open-source software, is provided "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, title and non-infringement, and any warranty that the Service will be uninterrupted, secure or error-free, that it will make you anonymous, that a gateway operator will not observe or interfere with traffic passing through their machine, or that using a VPN is lawful where you are.

Some places do not allow certain warranties to be excluded, so some of these exclusions may not apply to you. These disclaimers do not limit what our Privacy Policy says about the data we do and do not collect.

13. Limitation of liability

To the fullest extent the law allows, InFlux Technologies LLC and its affiliates, officers, employees and agents will not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, data, goodwill or business opportunity, arising out of or relating to the Service or these Terms, however caused and even if we were told they were possible.

Our total liability for all claims arising out of or relating to the Service or these Terms is limited to the greater of (a) the amount you paid for the Service in the 12 months before the event giving rise to the claim, and (b) US$50.

We are not responsible for failures or delays caused by events beyond our reasonable control, including outages of the Flux network or blockchain, gateway operators, internet providers, app stores or payment processors. Nor are we liable for losses caused by the loss or disclosure of your key, by payments sent to the wrong address or code, or by the acts or omissions of gateway operators or other third parties. Nothing in these Terms excludes or limits any liability that cannot be excluded or limited by law, such as liability for fraud, or for death or personal injury caused by negligence.

14. Indemnity

To the extent the law allows, you agree to defend, indemnify and hold harmless InFlux Technologies LLC and its affiliates, officers, employees and agents against any claims, losses, liabilities and expenses (including reasonable legal fees) arising out of your breach of these Terms, your misuse of the Service, or your violation of any law or of anyone else's rights.

15. Changes to these Terms

If we change these Terms, we will update the "Last updated" date above and post the new version at cumulusvpn.com/terms. Material changes will be highlighted. Because we have no accounts and keep no mailing list, the website is the authoritative source for the current Terms. Changes apply from the date they are posted and are not retroactive. If you keep using the Service after that, you accept the updated Terms; if you do not agree, stop using the Service and cancel any subscription.

16. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, USA, and by applicable US federal law, including the Federal Arbitration Act, without regard to conflict-of-law rules. If you have a problem with the Service, please email us first at info@cumulusvpn.com; most issues can be sorted out quickly, and you and we agree to try to resolve a dispute informally for at least 30 days before starting a formal proceeding.

Arbitration. Any dispute that is not resolved informally will be settled by binding individual arbitration administered by the American Arbitration Association under its Consumer Arbitration Rules, instead of in court. Either of us may instead bring an individual claim in small-claims court, and either of us may ask a court for an injunction to stop infringement or misuse of intellectual property. The arbitration may take place by video call or on written submissions, and the award may be entered in any court with jurisdiction. You may opt out of this arbitration agreement by emailing us within 30 days of first accepting these Terms, giving your Device code.

No class actions. You and we may bring claims against each other only individually, not as a plaintiff or class member in any class, collective or representative proceeding, and you and we waive any right to a jury trial. If this waiver is found unenforceable for a particular claim, that claim will proceed in court, not in arbitration. Any claim that goes to court will be heard exclusively by the state or federal courts located in Delaware, and you and we consent to their jurisdiction.

To the extent the law allows, any claim arising out of or relating to the Service or these Terms must be brought within one year after it arose, or it is permanently barred.

If you are a consumer in the European Union, the United Kingdom or another country whose mandatory consumer laws do not allow parts of this section, you keep those protections, and nothing in these Terms takes away your right to bring a claim in the courts where you live where those laws allow it.

17. General

These Terms, together with our Privacy Policy and the terms of any app store or payment provider you use, are the whole agreement between you and us about the Service. If any part of these Terms is found unenforceable, the rest stays in effect. If we do not enforce a right, we have not waived it. You may not transfer your rights under these Terms; we may transfer ours to an affiliate or in connection with a merger, acquisition or sale of assets. These Terms are written in English; if we provide a translation, the English version prevails.

WireGuard is a registered trademark of Jason A. Donenfeld. CumulusVPN is an independent project and is not endorsed by or affiliated with the WireGuard project.