Privacy Policy

Last updated: September 2026

Introduction

Palyfox VPN (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, what we deliberately do not collect, and how we handle your data when you use our VPN apps and website.

We do not log browsing activity or DNS queries. We do not collect, store, inspect, sell, or disclose:

Your browsing history or the destinations of your traffic
DNS queries made through the VPN tunnel
The content of your network traffic

We do not sell your browsing history, DNS queries, or traffic content. Advertising in the free tier is served in the app interface only and is never based on your VPN destinations or traffic content.

Information We Collect

We collect the minimum information necessary to operate the service:

Account information: An account identifier is created automatically when you first use the app. If you register, we also store your email address for authentication and support.
Device registration: To establish the VPN tunnel we store your device’s WireGuard public key, an assigned internal IP, a device name and type, the last connection time, the most recent tunnel handshake, and per-device/per-server transfer counters. This is required to operate the connection and to clean up unused registrations; it does not reveal what you do through the tunnel.
Bandwidth totals: Daily upload/download totals per account, used to enforce free-plan limits. These totals cannot be used to identify specific online activity.
Subscription status: Your subscription state (managed through Apple or our payment providers). We do not store credit card details.
Timezone: Your device timezone, so daily limits reset at your local midnight.

In-App Advertising, Analytics, and Notifications

Our free tier is supported by ads shown inside the app (never injected into your browsing). The apps use the following third-party SDKs:

Google AdMob — non-personalised in-app ads in the free tier. Where required (EEA/UK), ads are shown only after you make a consent choice. The apps do not use AdMob for cross-app tracking. You can change your consent choice in Settings → Privacy options where available.
Mixpanel — product analytics (screens used, subscription funnel, and VPN connection/disconnection events). Tied to your account identifier, never to browsing destinations, DNS queries, or traffic content. On Apple platforms, Mixpanel is off by default and used only if you opt in during onboarding or in Settings. On Android, Mixpanel starts opted out. It is enabled for users who are not shown ads; for ad-supported users, activation follows Google’s consent status.
OneSignal — push notifications (e.g., data-limit warnings).
Sentry — crash reporting. On Apple platforms, Sentry is off by default and used only if you opt in during onboarding or in Settings.
RevenueCat — subscription management and in-app ad measurement, including ad placement, impression, lifecycle, network, and revenue events. It does not receive browsing destinations, DNS queries, or traffic content.
Paddle — payment processing for web checkout. Paddle receives billing details, but never VPN traffic data.
Telegram — account linking and bot commands. If you use the bot, we store your numeric Telegram user ID, private chat ID, linked Palyfox account ID, and short-lived action state. Telegram does not receive VPN traffic data.

Website Analytics

When configured, our website loads analytics and advertising pixels from Google Analytics/Ads, Meta, TikTok, Snapchat, Pinterest, X, and Microsoft Advertising. These providers may receive or set identifiers such as cookies, device or advertising identifiers, campaign and click identifiers, the page URL and referrer, your IP address, and browser or user-agent information. We use this data for audience measurement, campaign attribution, and advertising performance.

Data Security

Your VPN connection is protected by the WireGuard® protocol (Curve25519, ChaCha20-Poly1305). Account data is stored in encrypted databases with row-level security. VPN keys are generated on your device; private keys never leave it.

Data Retention and Deletion

Device registrations inactive for 30 days are deleted automatically. You can delete a guest or email account in the Palyfox VPN app at any time.

On iPhone or iPad, open Settings, tap Delete account, then tap Delete to confirm.
On Mac, open Account in the sidebar, click Delete account, then click Delete to confirm.

If you need help or no longer have the app, see the account deletion instructions for how to contact support.

Deletion removes your account, devices, VPN configurations, and usage history from our active systems. We may retain limited billing and deletion-audit records—including an account identifier, subscription identifier, provider result, and timestamp—where needed for fraud prevention, billing, tax, security, or legal compliance.

Your Rights

You have the right to access your personal data, request deletion, export your data, and opt out of marketing communications. EEA/UK users may additionally exercise rights under the GDPR, including lodging a complaint with a supervisory authority.

Contact Us

If you have questions about this Privacy Policy, contact us at support@palyfox.com.