It’s very likely that they’re sharing your data with third-parties, too. This is an excessive amount of data for a VPN service to collect from users, especially given that they retain the information for “ as long as necessary”. Your birth date, profile picture and friends list (if you register or sign in via a social network).The time and date you visited those websites.