Privacy Policy
This policy explains what the VPN Proxy app (“the app”, “we”) processes, why, and what choices you have. Questions: hi@weltderwunderelab.com or the contact form.
No account, no traffic logs
The app doesn’t ask for your name, email or phone number. On first launch it creates a random guest identifier and secret on your device. They let our servers issue you VPN keys and check your subscription.
We don’t record the websites you visit, your DNS queries or the content of your traffic.
What we process
- Guest identifier. A random ID created by the app. It links your device to your subscription and VPN keys.
- VPN keys. For WireGuard, the app creates a key pair on your device. Only the public key is sent to our servers; the private key stays in your device’s Keychain.
- Connection data. While you are connected, our servers see your IP address and the time of the connection. We use them only to run the session. We don’t log VPN connections and don’t keep your IP address after the session ends, except in the technical logs described below. For each VPN key we store only the time of the last connection and the total amount of traffic, without IP addresses or the sites you visit.
- Technical logs. When the app or a browser contacts our servers’ web services (for example, to get VPN keys, the server list or this website), our servers log the IP address, the time and the requested address. Our firewall logs blocked connection attempts with their IP address. We use these logs only for security and troubleshooting. They never contain the sites you visit through the VPN or the content of your traffic.
- Service health. Server load and aggregated, non-identifying counters (for example, how many connections a server has). They help us balance servers.
- Network checks in the app. To pick a fast server, the app measures ping and download speed to our servers. The speed test downloads test data from Cloudflare (speed.cloudflare.com). To confirm that the VPN works, the app asks api.ipify.org which IP address it sees. These services receive your IP address under their own policies.
- Diagnostics. Only if you choose Settings › Copy diagnostics and send them to us. Diagnostics contain no links, keys or addresses.
- Support messages. The email address and message you send us through the app or the contact form.
Purchases
Apple processes all payments. We never see your payment details. To unlock Premium, we use Adapty, which receives App Store transaction information, your guest identifier and the device’s vendor identifier (IDFV).
Ads (free plan)
Without Premium, an ad plays before each connection. Ads are served by Appodeal and its partner networks. They may receive device and network information, such as device model, operating system, IP address and approximate location derived from it.
Your advertising identifier (IDFA) is shared only if you allow tracking in the iOS prompt. You can change this anytime in iOS Settings › Privacy & Security › Tracking. Where the law requires consent for personalized ads (for example, in the EU, the UK and some US states), the app asks for it, and you can change your choice in Settings › Ad Privacy Choices.
Install attribution
We use AppsFlyer to learn which ad campaign led to an install and to measure subscriptions that follow. AppsFlyer receives the IDFV, IP address, device information, install and purchase events and, only if you allow tracking, the IDFA.
Why we process data
- To provide the VPN service and your subscription (performance of a contract).
- To keep the service secure and working, and to balance servers (legitimate interests).
- To show ads in the free plan and measure campaigns (consent where the law requires it, otherwise legitimate interests).
- To answer your messages.
Sharing
We share data only with the processors named above: Apple, Adapty, Appodeal and its partners, AppsFlyer, and our hosting providers. We don’t sell personal information for money. Ads in the free plan may count as “sharing” for cross-context advertising under some US state laws. To opt out, decline tracking in iOS or choose Settings › Ad Privacy Choices, or subscribe to Premium, which has no ads.
Retention
- Connection data: only for the length of the session.
- Technical logs: deleted automatically within 5 weeks.
- VPN keys, last connection time and traffic totals: up to 40 days after you last connected to a server.
- Guest identifier and subscription status: while you use the app, and up to 12 months after your last activity.
- Support messages: up to 24 months.
Your rights
Depending on where you live, you can ask us to access, correct, delete or export your data, or object to its use. Write to hi@weltderwunderelab.com and include your guest identifier from Settings › Copy diagnostics so we can find your data. You can also complain to your local data protection authority.
Deleting the app removes the guest identifier and keys from your device. To cancel a subscription, use iOS Settings › Apple ID › Subscriptions.
Children
The app isn’t meant for children under 13 (under 16 in the EU), and we don’t knowingly process their data.
International transfers
Our servers and providers are located in the United States and Europe. When data moves between countries, we rely on the safeguards the law provides, such as Standard Contractual Clauses.
Changes
If we change this policy, we’ll update the date above. For significant changes, we’ll let you know in the app.