Privacy Policy

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information such as your device IP address. If you sign up for my service, your email will be stored in the database, along with your encrypted password and your country code. Your password is encrypted using one-way encryption. No one will be able to know it even if they have access to the database. In accordance with the GDPR, the connection logs will be saved at least for one year and will only be disclosed to the authorities in case of a criminal investigation.

The app does use third-party services that may collect information used to identify you.

Link to the privacy policy of third-party service providers used by the app:

• Google Play Services
• AdMob
• Sentry (crash & error monitoring — see “Crash & Error Reporting” below for what is sent)

We want to inform users of this Service that these third parties have access to their Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

For Addons Only

We at SandVPN respect your privacy and are committed to transparency regarding the information we collect. This Privacy Policy outlines the type of information we gather and how it is utilized. We might collect information such as URL, referrer, content-type, user agent, country, city, state, accept languages, and scheme. This data shared in an anonymized format with trusted partners in exchange for financial support (as detailed below) and mostly to provide a safe browsing online. The information collected is used solely for financial transactions with our partners and does not include any personally identifiable information that could be traced back to individual users. We want to assure our users that protecting your privacy is our top priority. We do not share personal information, and all data exchanged is done in a manner that ensures user anonymity.

Log Data

I want to inform you that whenever you use my Service, in a case of an error in the app, I collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing my Service, the time and date of your use of the Service, and other statistics.

Crash & Error Reporting

To diagnose and fix bugs quickly, SandVPN uses Sentry (Functional Software, Inc. d/b/a Sentry, USA / Sentry GmbH, Germany) as a third-party error monitoring processor. The integration is scoped to the absolute minimum a crash reporter needs.

What we transmit to Sentry

• JavaScript exceptions and crash stack traces (source code lines, no runtime data values beyond the error message itself)
• App version, device model and manufacturer, OS version, screen and memory specs, locale, timezone
• Anonymous breadcrumbs — high-level navigation events, button taps, and the URL paths of API endpoints called (never their content)
• A randomly generated install identifier created by the Sentry SDK on the device. This identifier is not linked to your email, account, or any real-world identity

What we deliberately do NOT transmit

• Your real IP address. The SDK is configured to force the IP field to 0.0.0.0 before any event is sent, so Sentry never receives it
• Your geographic location (city / country). IP-derived geolocation is stripped before storage
• Authentication tokens, refresh tokens, session cookies, JWTs, or any Authorization headers. These are pattern-matched and redacted client-side before transmission
• Your email address, password, or any account credential
• The content of your VPN traffic, your DNS queries, or the websites you visit while connected. SandVPN does not log, inspect, or transmit your browsing activity to Sentry or to any third party

Retention & transfer

Sentry stores crash data on servers located in the European Union (Germany) for up to 90 days, after which it is automatically deleted. Data transfer complies with applicable Standard Contractual Clauses.

Your control

You can disable crash reporting at any time. On the mobile app, go to Settings → Privacy → Send anonymous crash reports and toggle it off. Once disabled, no further events will be transmitted from your device.

Legal basis (GDPR)

Article 6(1)(f) — legitimate interest in maintaining a stable and secure service for all our users. You may object to this processing at any time by disabling the toggle above or by contacting us at [email protected].

Usage Analytics (first-party)

To understand which features are used, how reliably VPN connections succeed in each region, and where people drop off when subscribing, the SandVPN apps, browser extensions and this website send a small set of anonymous usage events to our own servers. No third-party analytics SDK is involved, and this data is never sold or shared with anyone. On the website these events carry no identifier that outlives the tab: nothing is written to your device, so the same page cannot recognise you on a later visit.

What we collect

• Event names only (e.g. “paywall viewed”, “connection succeeded”, “connection failed”) with minimal technical context, such as the VPN protocol used and the app screen involved
• App platform (Android, browser) and app version
• Your country, derived from your IP address at request time — the IP address itself is discarded immediately and never stored
• A randomly generated install identifier, not linked to your email, account, or any real-world identity

What we deliberately do NOT collect

• Your IP address, email address, or any account credential
• Your browsing activity, DNS queries, or the content of your VPN traffic — SandVPN does not log or inspect what you do online

Retention

Raw events are stored on our own infrastructure and automatically deleted after 12 months.

Your control

You can opt out at any time. On the mobile app, go to Settings → Privacy → Share anonymous usage statistics and toggle it off. Once disabled, no further events are sent from your device.

Legal basis (GDPR)

Article 6(1)(f) — legitimate interest in improving the reliability of the Service. You may object to this processing at any time via the toggle above or by contacting us at [email protected].

With whom do we share information?

We do not rent or sell any Personal Information. We may disclose Personal Information to other trusted third party service providers or partners for the purposes of providing you with the Services, storage and analytics. We may also transfer or disclose Personal Information to our subsidiaries, affiliated companies. We may also share your Personal Information and other information in special cases if we have good reason to believe that it is necessary to: (1) comply with law, regulation, subpoena or court order; (2) detect, prevent or otherwise address fraud, security, violation of our policies or technical issues; (3) enforce the provisions of this Privacy Policy or any other agreements between you and us, including investigation of potential violations thereof; (4) protect against harm to the rights, property or safety of us, its partners, its affiliates, users, or the public.

For Addons

Before we collect any data, your explicit consent is required via a pop-up notification. Without your consent, no data will be collected. As described above, we share fully anonimized browsing data and insights with affiliated security company such as Urban Cyber Security Inc. For more information, please see the Urban Cyber Security Inc Policy.

Security and Confidentiality

We use industry-standard information, security tools, and measures, as well as internal procedures and strict guidelines to prevent information misuse and data leakage. Our employees are subject to confidentiality obligations. We use measures and procedures that substantially reduce the risks of data misuse, but we cannot guarantee that our systems will be absolutely safe. If you become aware of any potential data breach or security vulnerability, you are requested to contact us immediately. We will use all measures to investigate the incident, including preventive measures, as required.

Your Choices and Rights

We strive to give you ways to update your information quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes. When updating your personal information, we may ask you to verify your identity before we can act on your request. If you are a resident of California, United States, you have the right to send us a written request regarding a list of Personal Information categories that we may have disclosed to third parties or to which we may have given to third parties, and the details of such third parties. If you are a resident of the European Union, please note that the following rights specifically apply regarding your personal information: (1) Receive confirmation as to whether or not personal information concerning you is being processed, and access your stored personal information, together with supplementary information; (2) Receive a copy of personal information you directly volunteer to us in a structured, commonly used and machine-readable format; (3) Request rectification of your personal information that is in our control; (4) Request erasure of your personal information; (5) Object to the processing of personal information by us; (6) Request to restrict processing of your personal information by us; (7) Lodge a complaint with a supervisory authority. However, please note that these rights are not absolute, and may be subject to our own legitimate interests and regulatory requirements. To exercise such right, you may contact us at: [email protected]

Data portability

Where we process your data on the basis of your consent or of a contract with you, you can ask for a copy of that data in a structured, commonly used, machine-readable format, or ask us to send it directly to another provider where that is technically feasible. Write to [email protected] and we will answer within one month.

Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects concerning you. Automated measures that protect the service against abuse are limited to technical limits on connections, are never based on a profile of who you are, and can always be reviewed by a person on request.

Retention

We will retain your personal information for as long as necessary to provide the Service, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Under applicable regulations, we will keep records containing client personal data, account opening documents, communications and anything else as required by applicable laws and regulations. We may rectify, replenish or remove incomplete or inaccurate information, at any time and at our own discretion.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

This Service does not use these “cookies” explicitly. However, the app may use third-party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Service Providers

I may employ third-party companies and individuals due to the following reasons:

• To facilitate our Service
• To provide the Service on our behalf
• To facilitate our Service
• To perform Service-related services
• To assist us in analyzing how our Service is used

I want to inform users of this Service that these third parties have access to their Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

I value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and I cannot guarantee its absolute security.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by me. Therefore, I strongly advise you to review the Privacy Policy of these websites. I have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

These Services do not address anyone under the age of 13. I do not knowingly collect personally identifiable information from children under 13 years of age. In the case I discover that a child under 13 has provided me with personal information, I immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact me so that I will be able to do the necessary actions.

Changes to This Privacy Policy

I may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. I will notify you of any changes by posting the new Privacy Policy on this page.

Contact Us

If you have any questions or suggestions about my Privacy Policy, do not hesitate to contact me at [email protected].