LynxVPN Privacy Policy

Last updated: 28 September 2026

This policy explains what information the LynxVPN Android app ("LynxVPN", "the app", "we") processes, why, and the choices you have. It applies to LynxVPN as published on Google Play by the developer shown on its Google Play page. Contact: [email protected].

1. The VPN service

When you connect, the app creates an encrypted tunnel between your device and our VPN server, currently located in the Netherlands and hosted by DigitalOcean. Websites and apps you use see the server's IP address instead of yours.

• No activity logs. We do not log the websites or apps you use, your DNS queries, or the content of your traffic.
• No stored IP addresses. Your IP address is necessarily visible to our server while the app talks to it. It is used only to deliver the connection, to limit abuse (rate limiting) and to look up which country you connect from, because LynxVPN is not offered in some countries (IP geolocation by DB-IP). This happens in memory only; your IP address is never written to disk by our VPN software. For a device refused for that reason, our server keeps only the country, until the device connects from somewhere else. Our website likewise uses only the country a request comes from to decide whether ads and the service are offered there.
• Device registration. To give each installation its own secure connection, the app creates an encryption key pair on your device and a device identifier derived from the identifier Android provides for this app (the Android value itself never leaves your device). Our server stores only that device identifier, the public key, the private VPN address assigned to it, when it was registered and last used, and the free-tier counters below. This data contains no name, email or phone number. It is deleted automatically after 90 days without use. Your private key never leaves your device. If you redeem an access code, the app also sends your device's model and Android version, which we keep with that code, on the VPN server and in our admin panel, so its owner can see which devices use it and how much data they use.
• Daily check-in and accounts (lynxvpn.app). Once a day the app tells our website that this installation is in use: the same device identifier, your phone's model, Android version, the app version and language. This is how we know how many people use LynxVPN. You can also create an optional account with an email address and password; it stores your email, a hashed password and which of your installations are linked to it, and nothing about your VPN use. Delete it at any time in the app under Account, or at lynxvpn.app/account (steps: lynxvpn.app/delete-account); your phones then continue as anonymous installations.
• Free-tier limits. The free service includes a daily amount of VPN time and a monthly amount of data. To apply these limits, our server counts for each device how long it has been connected, how much data it has used this month (a number of bytes, not what the data was) and how many reward videos it has watched today. These counters are used only for the limits.
• The app's own connections (to our server and to load ads) do not go through the VPN.
• DNS. While connected, the app uses Cloudflare (1.1.1.1) and Google (8.8.8.8) public DNS resolvers through the tunnel, so they see our server, not your IP address.

2. Advertising (Google AdMob)

LynxVPN is free and shows ads provided by Google AdMob, including reward videos you can choose to watch for extra VPN time. To show and measure ads and to prevent fraud, Google may collect information such as your device's advertising ID, IP address, device model and your interactions with ads.

The app also reports each ad it shows, with the estimated value Google assigns to it, to our website together with the device identifier above, so we can see what the service earns and whether the free plan pays for itself. No advertising ID, name or address is sent with these reports.

• Where the law requires it (for example in the European Economic Area, the United Kingdom, Switzerland and some US states), the app asks for your choices with Google's consent tool before ads are personalized. You can change them at any time in the app menu under Ad privacy settings (shown where required).
• You can reset or delete your advertising ID in your device settings (Settings > Google > Ads, or Settings > Privacy > Ads on some devices).
• Google's privacy policy: policies.google.com/privacy. How Google uses information from apps that use its services: policies.google.com/technologies/partner-sites.

3. Subscriptions (Google Play)

If you buy the "Remove ads" subscription, Google Play handles the payment; we never see your card or other payment details. Google tells the app and our server whether your subscription is active. Our server stores a one-way hash of the purchase token (a code Google Play gives each purchase) and the date your subscription is paid until, linked to your device identifier, to remove the ads and the time limit on your devices (up to 5 devices per subscription). You can manage or cancel your subscription at any time in Google Play. A completed purchase is also reported to our website (the plan, its price and a one-way hash of the purchase token, never the token itself) so we can count subscriptions.

4. Analytics and crash reports (Google Firebase)

We use Firebase Analytics and Firebase Crashlytics to understand how the app is used and to fix crashes. They may collect app interactions, crash logs, device model, operating system version and app instance identifiers.

5. Notifications (OneSignal)

If you allow notifications, OneSignal gives your device a push token so we can send you announcements. You can turn notifications off at any time in the app's Settings or in your device settings.

6. Feedback and support emails

Feedback is sent with your own email app, only when you choose to send it. We then receive your email address, your message, and the app and Android version included at the end of the message. We use them only to reply and to improve the app.

7. Permissions the app uses

• VPN: to create the encrypted tunnel you turn on.
• Notifications: to show the connection status and announcements.
• Internet and network state: to connect and to load ads.
• List of installed apps: only on your device, to let you choose apps that bypass the VPN (split tunneling). This list is never sent to us or anyone else.

8. Sharing and selling

We do not sell your personal information. Information is shared only with the service providers named above (DigitalOcean, Google Play, Google AdMob, Google Firebase, OneSignal), for the purposes described.

9. Data retention and deletion

Device registration data, including the free-tier counters and subscription records, is deleted automatically after 90 days without use; uninstalling the app stops its use. You can also email us to ask for deletion or access. Data held by Google and OneSignal is kept according to their own policies.

10. Children

LynxVPN is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information.

11. Your rights

Depending on where you live (for example under the EU/UK GDPR or US state laws), you may have the right to access, correct or delete your personal information, to object to or restrict its processing, and to withdraw consent. Contact us at [email protected] to exercise these rights.

12. Security

Your traffic is encrypted between your device and our server. Access to our servers is restricted, and our registration service stores only the minimal data described above. The device identifier is also used to prevent abuse of the free service.

13. Changes to this policy

We may update this policy. The new version will be published here with a new "Last updated" date.