New RoTunneling VPN account
Three short steps: account, plan and billing details. You see the total, VAT included, before you pay.
-
Your account is created and you are signed in. You can change it any time from the client area.
-
Which plan fits you?
Test your internet speed and we will recommend the right plan. The test is optional and takes less than a minute.
- Download
- Mb/s
- Upload
- Mb/s
Because of encryption, your connection type (Wi-Fi, mobile data, cable) and the traffic destination, the speed you get over the VPN may differ.
Have a coupon?
A coupon does not add up with the period discount: we apply the larger one.
Your price
- –
- TVA estimated
- –
- Total
- – EUR
Estimated for the country we detected. We confirm it after your billing details, in the next step.
14-day money back if you are not satisfied after your first payment.
Billing details come next. You pay only at the end.
-
Your order
- Plan
- Invoice to
- Total to pay
- –
Have a voucher?
A voucher does not add up with the period discount: we apply the larger one.
Pay
- 14-day money back if you are not satisfied after your first payment.
- Your card is saved for automatic renewal. You can turn renewal off any time from your account.
- You pay on the secure Stripe page. The tax invoice comes by email.
Terms and Conditions
The purpose of RoTunneling VPN service is to help users access the Internet without censorship, ensure their safety and privacy and prevent tracking while browsing the internet.
RedShift IT SRL (VAT ID RO26963888), as sole operator of the RoTunneling VPN service is not responsible and can not be held liable for any action of the beneficiaries of the service. The recipients are solely responsible for all their actions.
By activating an account on this website you agree to comply with these Terms and Conditions and with the law; these terms have contractual value.
The service requires a working internet connection and a stable connection to the RoTunneling VPN servers on at least one of the ports 53 UDP, ICMP, TCP 443.
RoTunneling VPN is subscription based.
Returns
If you are not satisfied you should ask for help by email at [email protected].
If after asking for help you are still not satisfied you can ask for a full refund within 14 calendar days from your first payment.
For online payments made by credit or debit card, the refund will be issued to the card you used for the payment.
Malware and Phishing Protection
It blocks most sites that distribute malware, phishing, ransomware, tracking, and some ads.
It is based on 2 layers of protection, one developed by us, another based on CloudFlare DNS to ensure the best possible coverage. This feature is offered free to all RoTunneling VPN customers. It does not offer any 100% protection guarantee, no protection system can offer.
If you notice a site or application that you cannot access and you believe this is a mistake, please write to us at [email protected].
It is based on 2 layers of protection, one developed by us, another based on CloudFlare DNS to ensure the best possible coverage. This feature is offered free to all RoTunneling VPN customers. It does not offer any 100% protection guarantee, no protection system can offer.
If you notice a site or application that you cannot access and you believe this is a mistake, please write to us at [email protected].
Respect the law
Beneficiaries have the obligation to correctly provide personal data required for registering an account, incorrect personal data represents forgery and use of forgery in public documents as it falls under the Romanian law.
This service is not intended for the following:
- It is strictly forbidden to use the VPN network to send unsolicited email (spam).
- It is strictly forbidden to use the VPN to exploit informational systems.
- It is strictly forbidden to use the VPN for DDoS attacks.
- It is strictly forbidden to use the VPN for fraud, illegal access to applications, databases, to access child pornography, and any actions must abide by laws of this country (Romania) and also international laws. Especially, but not only the law 161/2003 including all changes until the current date.
Accounts that do not comply with one or more of these terms and conditions can be disabled without notice. Beneficiaries accept this along with all terms and conditions and RedShift IT SRL can't be held liable for any direct or indirect damage or beneficiaries actions.
The user's acceptance is necessary for the provision of services set out in the contract, subsequent disagreement with the Terms and Conditions makes it impossible to provide the services and therefore results in deletion of the account. Renouncing the service by expressing disagreement with the Terms and Conditions does not entitle you to a refund of the plan value.
GDPR
According to the GDPR provisions, we will further detail:
Information collected from users.
The purpose for which they are collected.
Other information collected by third parties
Information collected by RoTunneling and shared with third parties.
The period they are stored.
The right to be forgotten.
The locations where the collected data is stored.
Maximum response time to GDPR requests.
Information collected from users.
In order to offer our services at the highest quality, we collect the following personal data:
Individuals:
1. Nick / Nickname (username)
2. Name and surname
3. Phone number
4. Email
5. Address
6. CNP / National ID (for users registered before 02/12/2014)
Legal persons:
1. Nick / Nickname (username)
2. Organization name
3. Phone number
4. Email
5. Billing address
6. CIF / VAT number
7. Registration number of the Trade Register (J)
8. Information on the status of VAT payer (Y / N)
9. IBAN (older accounts only; we no longer collect it)
10. Branch and Bank where the IBAN account was opened (older accounts only; we no longer collect it).
During the service we also collect the following data:
1. Connection information and aggregated traffic statistics:
username
the server to which the user has logged in
the server port on which the connection was made
the public IP of the user on which the connection was made
the date and time at which the connection was initiated
the date and time at which the connection was stopped
how long the connection lasted
traffic in
traffic out
The purpose for which they are collected:
Individuals:
1. First and last name
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
2. Phone number
We use this information:
- asking for a password reset to verify the authenticity of your password reset request.
- to communicate service/security and personal data issues in case it is needed, for example, if your account has been compromised or affected by a security breach.
- in order to be able to resolve certain support requests sometimes more efficiently.
3. Email
We use this information:
- asking for a password reset to verify the authenticity of your password reset request.
- to communicate service/security and personal data issues in case it is needed, for example, if your account has been compromised or affected by a security breach.
- in order to be able to resolve certain support requests sometimes more efficiently.
4. Address
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
5. CNP / National ID (for users registered before 02/12/2014)
We need this billing information.
In order to identify the user in order to solve the technical and commercial support requests in case it is necessary to check the authenticity of the application.
Upon request, we can delete this information from the system if it has been collected and the user wants to delete it. For this, please contact us using the support contact details.
6. Nick / Nickname (username)
We use this information to make it possible to login to your account on the site and to the VPN servers.
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
We prefer to use a pseudonym instead of an email address to protect personal data and avoid using more of it than necessary.
Companies:
1. Nick / Nickname (username)
We use this information to make it possible to login to your account on the site and to the VPN servers.
We prefer to use a pseudonym instead of an email address to protect personal data and avoid using more of it than necessary.
2. Organization / Company Name
We need this billing information in accordance with the Fiscal Code (Law 227/2015, with up-to-date updates).
To identify the user with the purpose of solving technical and commercial support requests.
3. Phone number
We use this information:
- asking for a password reset to verify the authenticity of your password reset request.
- to communicate service/security and personal data issues in case it is needed, for example, if your account has been compromised or affected by a security breach.
- in order to be able to resolve certain support requests sometimes more efficiently.
4. Email
We use this information:
- asking for a password reset to verify the authenticity of your password reset request.
- to communicate service/security and personal data issues in case it is needed, for example, if your account has been compromised or affected by a security breach.
- in order to be able to resolve certain support requests sometimes more efficiently.
5. Billing Address
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
6. CIF / VAT number
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
7. Registration number of the Trade Register (J) (Romanian companies only)
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
8. Information on the status of VAT payer (Y / N)
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
9. IBAN (older accounts only; we no longer collect it)
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
10. Branch and Bank where the IBAN account was opened (older accounts only; we no longer collect it).
We need this billing information in accordance with the Romania Fiscal Code (Law 227/2015, with up-to-date updates).
Upon requesting a password reset, in order to verify the authenticity of your password reset request.
To identify the user with the purpose of solving technical and commercial support requests.
During the service usage:
The data collected during the operation of the service are aimed at the proper functioning of the service:
- Identify the number of simultaneous authentications automatically to apply the limit according to the chosen package.
- Traffic statistics to identify the need for upgrades/downgrades to servers.
- Identify the region from where the connection was made to increase the number of servers and thus improve the service in those regions.
- We partially display them in the user account, for the user to be able to track the use of the service (Connected Devices) in order to easily identify possible situations in which the user account has been compromised.
These data are automatically deleted 6 months after collection. We keep only the date of the last connection (the day, no IP or traffic) for the inactive account rule described below.
We do not record the content of your traffic or a history of the sites and pages you visit through the VPN.
Other information collected by third parties:
Google Analytics - on the web application, in order to ensure the good functioning of the site and increase the traffic capacity when needed. Identify the main sources of traffic and the general interest of users in order to be able to mark the service in an appropriate way. - GDPR compliant
Google Ads - Identify traffic coming from paid advertisements to determine conversion rate and optimize creatives. - GDPR compliant
Facebook Ads - Identify traffic coming from paid advertisements to set conversion rate and optimize ads. - GDPR compliant
CloudFlare - identifies the traffic and type of HTTP requests made to the web server to improve the automated and semi-automated security systems provided by Cloudflare. - GDPR compliant
EmbedSocial - email and other information the user chose to include in their feedback. - GDPR compliant
Sleekplan - email, username and suggestions sent through the feedback page. - GDPR compliant
Cloudflare Turnstile, public DNS (Cloudflare 1.1.1.1, Quad9 9.9.9.9) and the speed.cloudflare.com speed test - used for anti-abuse checks on forms, for DNS when the app's anti-malware protection is turned off and to pick the fastest server. These services see the user's public IP address.
The website uses cookies for sign-in, language and the third-party services above. Details about the app and the data we process: Privacy Policy.
Information Collected by RoTunneling and Shared with Third Parties:
SC ACCOUNT EXPERT HOUSE SRL - Tax invoices for the purpose of accounting.
Tax invoices contain the personal data mentioned above for billing purposes.
Data retention is in line with the Romania Fiscal Code (Law 227/2015, with up-to-date updates) and with the Romanian State Law on the Retaining of Legal Entities in Romania.
Details:
Retention of tax invoices, in accordance with the provisions of the Order of the Ministry of Public Finance (MFP) no. 2634/2015, in force from 1 January 2016, must be retained for 10 years starting from the end of the financial year in which they were drawn up.
In addition, in case of ceasing the activity of a company, the financial-accounting acts shall be kept in accordance with the provisions of the Companies Law no. 31/1990 or can be handed over to the state archives.
Romania, Bucharest - GDPR compliant.
Stripe - Billing information, as defined above.
Stripe is our payment processor, so it is necessary to share this information with Stripe in order to make the payments.
Details: https://stripe.com/en-gb-ro/guides/general-data-protection-regulation - GDPR compliant.
Oblio - Billing information, as defined above.
Oblio is the platform we use to issue fiscal invoices, so this information is shared with Oblio in order to issue the invoices.
Romania - GDPR compliant.
Details: https://www.oblio.eu/
Google Maps Platform - The address text typed in the billing form, to suggest address completions.
Details: https://policies.google.com/privacy - GDPR compliant.
tawk.to - Messages and contact details the user chooses to send through the support chat on the website.
Details: https://www.tawk.to/privacy-policy/ - GDPR compliant.
Mailjet - Sending transactional emails (account validation, password reset, payment confirmations and invoices).
We share with them the email address and name of the user, strictly to deliver these emails.
Mailjet (Sinch group) - GDPR compliant.
The period they are stored:
Connection information is stored for 6 months, then deleted automatically. The date of the last connection and of the last sign-in to the account or the app is kept as long as the account exists.
Invoices are kept for 10 years from the end of the financial year they were issued in, then deleted automatically.
Inactive accounts:
An account is inactive when, for 2 years, it has had no active subscription, no VPN connection, no sign-in to the client area or the app and no payment. We normally e-mail the user 30 days in advance; simply signing in keeps the account. We then delete the account's personal data and VPN login data. Invoices stay until their legal retention period ends.
Information collected by third parties that allow us to set up the retention period (eg google analytics) is stored for a period of 14 months.
The right to be forgotten.
You may exercise the right to be forgotten directly from the client area (Profile tab, Delete account button) or by contacting us at the email address for support. The account is deleted after a 30-day grace period, during which you can cancel the deletion from the client area or from the link we email you. During this period auto-renewal is off and the saved card is removed from the account.
And we will delete all personal data in your account, including this, except for your tax invoices, which according to the Order of the Ministry of Public Finance (MFP) no. 2634/2015, in force from 1 January 2016, must be retained for 10 years starting from the end of the financial year in which they were drawn up.
In addition, in case of ceasing the activity of a company, the financial-accounting acts shall be kept in accordance with the provisions of the Companies Law no. 31/1990 or can be handed over to the state archives.
In case of using the right to be forgotten, and request deletion of all data about the account (except invoices) you understand that you can't use the service anymore and any remaining paid plan time will be forfeited. You understand and accept this and waive any RoTunneling VPN obligation to you, including VPN services, without any refund.
Locations where the collected data is stored:
Oracle Cloud Infrastructure - Germany Central (Frankfurt) region, Germany - website servers and database.
VPN servers - Romania.
AWS - eu-west-1 region - Ireland (installation files).
Amazon Web Services, Inc. - GDPR compliant.
Headquarters of RedShift IT SRL (RoTunneling VPN) - Bucharest, Romania. - GDPR compliant.
S.C. ACCOUNT EXPERT HOUSE SRL - Bucharest, Romania. - GDPR compliant.
Maximum response time to GDPR requests:
Maximum 30 days.
In case of inconsistency between the version of this document in Romanian and English, the Romanian version will take precedence over the English version.
Last update 20.10.2026.
