Privacy Policy

Last updated: September 30, 2026

1. Introduction

VPN Dan ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our VPN service and mobile application.

2. Information We Collect

2.1 Account Information

When you create an account and use the service, we collect:

  • Email address — used for account identification, authentication, and essential service communications.
  • Device name & type— (such as "iPhone" or "Mac") and platform, used to set up and manage your VPN connection and to show you the devices connected to your account.
  • Free-device anti-abuse state — a random credential kept in your Keychain, its one-way hash on our server, and two Apple DeviceCheck flags used only to prevent repeated free-account claims. A manual reassignment request temporarily stores the verified email and proposed claim hash for up to seven days. This data does not include a hardware serial number, browsing activity, or connection history.
  • Monthly data usage and plan — an aggregate transfer total for the current UTC month, plus which plan your account is on, used to apply and display your monthly data allowance. It is not a browsing or per-session activity log.
  • Active connection details — while a device is connected, we store the public key of its tunnel and the private address it was assigned inside the VPN network (for example 10.0.0.24). These are required to route your traffic, are reused for as long as that connection exists, and are deleted when you disconnect the device or delete your account. They do not record where you went or when.
  • Monthly ad-blocking count — the aggregate number of DNS requests blocked by the optional ad and tracker filter. We do not retain the requested domain names, query contents, or query timestamps.

2.2 Information We Do NOT Collect

We are a strict no-logs VPN. We do not collect, store, or monitor:

  • Your browsing history or traffic data
  • Individual DNS queries or requested domain names
  • Your original IP address — the public address your internet provider gave you
  • Connection timestamps or session duration
  • Per-device connection history
  • Bandwidth usage per session

To show your current IP address on the Home screen, the app asks our server which address the request came from. The server sends it back and does not store it.

2.3 Technical Data

We collect limited technical data to maintain service quality and fix problems:

  • Aggregate server load metrics (not linked to individual users)
  • App version counts— how many accounts are running each build of the VPN Dan app (for example "iOS 1.5.2"), so we know how widely an update has rolled out and how many people a fix has not reached. The app sends its version and platform with its requests, and its build number is part of the standard header your device already sends. It is never stored against your account: we keep only anonymous counters, in the same way we count active users, so there is no record anywhere of which version you are on.
  • Crash & error diagnostics — We use Sentry, a third-party error-monitoring service, to collect crash and error reports. These reports may include your email address to help us diagnose account-specific issues. Sentry processes this data on our behalf and does not use it for any other purpose.

2.4 Website Cookies & Analytics

This applies to the vpndan.com website only — never to the VPN service or the apps, which contain no analytics and carry no browsing logs.

  • Google Analytics— If, and only if, you press "Accept" on our cookie banner, we load Google Analytics (measurement ID G-5X11DTNWMF), which sets cookies to count visits and see which pages are useful. It records page views, approximate location derived from a truncated IP address, referrer, and browser or device type. Advertising and personalization signals are disabled.
  • If you decline(or simply ignore the banner), no analytics script is loaded and no analytics cookies are set. We store a single entry in your browser's local storage to remember your choice — this is not a cookie and is never sent to us.

You can change your mind at any time via the "Cookie Settings" link in the site footer. Withdrawing consent stops further measurement and deletes the analytics cookies from your browser.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the VPN service
  • Authenticate your account
  • Send essential service communications (e.g., security alerts)
  • Improve our service and fix bugs

4. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit— VPN traffic uses AmneziaWG, which keeps WireGuard's modern cryptographic core (including ChaCha20-Poly1305 and Curve25519) while adding transport-level obfuscation.
  • Secure authentication— Customer accounts use passwordless email verification codes. Tokens are stored securely in your device's Keychain.
  • Infrastructure security — Our servers run hardened Linux with minimal attack surface.

While the VPN tunnel is active, IPv6 traffic is blocked inside the tunnel rather than allowed to bypass it; IPv6 access resumes after you disconnect.

5. Data Sharing

We do not sell, trade, or rent your personal information. We share data only with service providers who process it strictly on our behalf to operate the service — currently Sentry, which receives crash and error diagnostics (as described in Section 2.3), Apple DeviceCheck, which validates anonymous device flags used to prevent repeated free-account claims, and, if you have consented to analytics cookies, Google Analytics, which receives website visit data (as described in Section 2.4). We may also disclose information if required by law, and even then, we can only share what we have — which, due to our no-logs policy, is limited to your email and basic account data.

While you are connected, your DNS lookups travel inside the encrypted tunnel and are answered by the VPN server you are connected to. For names it has not recently looked up, the server asks Cloudflare's public DNS resolver, or Quad9's if Cloudflare cannot be reached, over encrypted DNS-over-HTTPS. These requests come from the server's own address and carry no account, device or original IP address, and we keep no record of them. Until a device with the ad and tracker filter off next connects from the app after this update, it keeps sending its lookups to Cloudflare directly, unencrypted between our server and Cloudflare.

6. Data Retention

We retain your account information (email) for as long as your account is active. VPN connection data is never stored and therefore cannot be retained. When you delete your account, your email, VPN peer records, active connections, pending reassignment requests, and monthly usage totals are permanently removed. A de-identified one-way free-device claim hash remains as an anti-abuse tombstone, and Apple retains the anonymous DeviceCheck flags, so deletion does not reset the device's free allowance.

7. Your Rights

You have the right to:

  • Access your personal data
  • Delete your account and personal data, subject to the de-identified anti-abuse record described above
  • Export your account information
  • Opt out of non-essential communications

8. Children's Privacy

VPN Dan is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

privacy@vpndan.com