Privacy Policy

Nitronet is a VPN for Android with no account system. This policy explains, in plain language, what the app, the VPN servers, and this website handle — and what they deliberately do not. It applies to the Nitronet Android application, the Nitronet VPN service, and nitronet.app (together, the Service).

Short version: there is no account. We do not log the sites you visit, the DNS names you look up, or the destination IP addresses you connect to. We do keep a small amount of short-lived connection metadata so the tunnel works and abuse can be stopped. Ads are served by Google with your consent where required. The full detail is below.

Who we are

Nitronet (“Nitronet”, “we”, “us”, “our”) is the developer and operator of the Nitronet Android app published on Google Play and of the nitronet.app website. Nitronet is the controller responsible for the processing described in this policy. Our postal address is available on request.

Contact: hello@nitronet.app

We answer privacy requests within 30 days, and tell you if a lawful extension applies.

Scope

This policy covers:

the Nitronet Android app;
the VPN service that the app connects to, including the control plane that issues device identities and connection leases, and the VPN servers that route traffic;
the nitronet.app website and its pages.

It does not cover third-party services you reach through the VPN, Google Play, or Google AdMob. Those services have their own policies. Links to them are provided for convenience and do not mean we control them.

The Service is intended for adults aged 18 and over. It is not directed to children. Availability may vary by region, and we may restrict the Service where providing it would be unlawful or unsafe. The website and this policy remain accessible from any region so that users and reviewers can read them.

There are no Nitronet accounts, logins, profiles, or passwords. You do not give us your name, email address, or phone number to use the app.

Summary

No account. The app creates a pseudonymous device key on first launch.
No activity logging. We do not record browsing history, DNS query names, destination IPs or domains, or packet payloads.
Limited metadata. We keep device public keys, connection leases, short-lived request logs, and aggregate counters — for routing, security, and abuse prevention. Retention is listed below.
Ads with consent. The free app shows one adaptive banner on the Home screen, served by Google AdMob. You can change your ad-consent choice in the app where the law requires it.
Subscriptions through Google Play. Nitronium is billed by Google Play. We do not receive your card details.
No sale of personal data. We do not sell personal information.

Data we collect

We collect only what is needed to run a VPN without accounts. The table lists every category, why it exists, where it lives, and how long it is kept.

Data	Why we process it	Where it lives	Retention
Device public keys and the derived device ID	Identify a pseudonymous device, issue tokens, revoke abusive devices	Control-plane database	Active device plus 90 days after last seen; revoked device plus 90 days after revocation; deleted immediately on a verified erasure request
Device token	Authenticate the app to the control plane and request leases	Encrypted storage on your device; the control plane does not store the token	Until it expires or you reset your identity
Control-plane request logs: source IP, request ID, user agent, route, status, timestamp	Operate and secure the API, investigate abuse and rate-limit events	Control-plane logs	Up to 30 days
VPN lease metadata: server, assigned IP addresses, connection ID, timestamps, status	Route traffic, renew or recover leases, prevent address conflicts	VPN server database	Active lease plus 24 hours after release or expiry
Client IP address and network port	Route tunnel packets and update the endpoint when you roam	Server lease record and in-memory peer state	Active lease plus 24 hours after release or expiry; not written to application access logs
Packet and byte counters	Capacity planning, abuse detection, aggregate metrics	In-memory metrics, without device labels	Aggregate metrics up to 13 months
DNS queries	Resolve your DNS inside the tunnel through an encrypted upstream	Transient resolver memory only	Not logged by Nitronet; the upstream resolver’s own retention applies
Browsing history, destination IPs, packet payloads	Route packets only	Transient memory only	Not logged
Advertising data: advertising and device identifiers, IP address, approximate location, ad interactions, app and device information	Serve and measure ads, prevent fraud, honour your consent choice	Google’s systems	Per Google’s policies
Nitronium purchase status	Show premium status and expiry; validate the purchase with Google Play	Google Play and local app storage	While subscribed, plus the period needed to resolve billing disputes
Support and privacy emails	Answer your request, handle abuse and legal matters	Email and support systems	Up to 24 months after the matter is resolved, unless a legal hold applies
Diagnostics export	Troubleshoot an issue you report	A file on your device; only shared if you choose to email it	Until you delete it; support email retention then applies
Website request logs	Deliver pages, secure the site, prevent abuse	Hosting provider	Up to 30 days where configured
Security and audit logs	Authentication, administrative actions, abuse investigation	Control-plane and server logs	Up to 30 days
Backups	Recovery from failure	Encrypted backups	Up to 35 days

Device identity and keys

On first launch the app generates a keypair on your device. The public halves and a derived device ID are registered with the control plane so that servers can recognise your device without an account. The private keys never leave your device. The device ID is pseudonymous: it is not linked to your name, email address, or Google account.

You can reset this identity in the app’s Settings. Resetting deletes the local keys and token and causes a new device registration on the next connection.

Connection and lease metadata

To give you an IP address and route packets, a VPN server must know which device holds which lease. That record contains the server, assigned addresses, a connection ID, timestamps, and status. It is deleted 24 hours after the lease is released or expires. The client IP address and network port are used to route packets and to follow you when your network changes; they are not written to application access logs and follow the same 24-hour terminal retention.

Request and security logs

The control plane records the source IP, request ID, user agent, route, status, and timestamp of API requests so that we can operate the service, rate-limit abuse, and investigate attacks. We do not log request bodies or full device tokens. These logs are kept for up to 30 days. Administrative and security audit events are kept for the same period.

DNS and traffic

DNS queries are resolved by a resolver that is reachable only through the tunnel. The resolver forwards them to an upstream provider over an encrypted connection. The upstream provider sees the resolver’s server IP, not your device IP. Nitronet does not log DNS query names.

We do not log browsing history, destination IP addresses or domains, or packet payloads. Traffic passes through the server in memory so it can be routed; it is not written to disk.

Advertising data

The free app shows one adaptive banner on the Home screen, provided by Google AdMob. Google may collect advertising and device identifiers, your IP address, approximate location derived from IP, ad interactions, and app and device information, as described in its own policies. We do not send your VPN traffic, DNS queries, or device keys to ad providers, and ads are never injected into your traffic. Nitronium subscribers see no ads.

Subscription data

Nitronium is purchased through Google Play. Google processes the payment; we do not receive or store card details. The app and the control plane may store a purchase token or entitlement state so that premium features can be unlocked and restored. Billing records held by Google are governed by Google’s policies.

Support and privacy requests

If you email us, we receive your email address, message, and any attachments you choose to send. Please do not send private keys, device tokens, or packet captures; we do not need them and cannot protect them if they are exposed. We keep support correspondence for up to 24 months after the matter is resolved, unless a legal obligation requires longer.

Diagnostics

The app can export diagnostics for troubleshooting. The export stays on your device unless you choose to send it to support. It is not uploaded automatically.

Website data

The website is static. It sets no cookies, runs no analytics, and loads no third-party scripts, fonts, or pixels. Our hosting provider may keep standard request logs (IP address, user agent, requested URL, timestamp) for delivery, security, and abuse prevention, for up to 30 days where configured.

How we use information

We use the information described above to:

create and authenticate a pseudonymous device identity;
allocate IP addresses, route your traffic, and renew or recover leases;
keep the service secure, detect abuse, enforce rate limits, and investigate attacks;
measure aggregate capacity and reliability without profiling individuals;
serve ads on the free plan and honour your consent choices;
process and restore Nitronium purchases through Google Play;
answer support, privacy, and security requests;
comply with legal obligations and enforce our Terms.

We do not use your data for automated decisions that produce legal or similarly significant effects. We do not build advertising profiles ourselves; ad personalisation, where you consent to it, is performed by Google.

Legal bases

Where the GDPR or UK GDPR applies, we rely on:

Purpose	Legal basis
Providing the VPN, issuing leases, routing traffic	Performance of a contract with you
Securing the service, preventing abuse, rate limiting, audit logs	Our legitimate interests in operating a safe service
Serving personalised ads and accessing advertising identifiers	Your consent, where required
Serving non-personalised ads and measuring aggregate performance	Our legitimate interests, subject to your choices
Handling purchases and entitlements	Performance of a contract and legal obligation
Responding to support and privacy requests	Legitimate interests and legal obligation
Complying with lawful requests and defending legal claims	Legal obligation and legitimate interests

Where consent is the basis, you may withdraw it at any time. Withdrawal does not affect processing that already happened.

What we do not collect

We do not collect or log:

the websites you visit, your browsing history, or your search queries;
DNS query names;
destination IP addresses or domains;
packet payloads;
your name, postal address, phone number, contacts, photos, or precise location;
payment card details;
health, biometric, or special-category data.

We do not sell personal information, and we do not share it for cross-context behavioural advertising ourselves. Google may process ad data for its own purposes under your consent and its policies.

This is not a claim that we collect nothing. The metadata in the table above is real, limited, and retained for the stated periods.

The free plan is funded by a single adaptive banner on the Home screen. There are no forced full-screen ads, no app-open ads, and no ads inside the VPN packet path or injected into other apps. Nitronium removes the banner.

Ads are provided by Google AdMob. Depending on your region and choices, Google may process:

advertising ID and other device identifiers;
IP address and approximate location derived from it;
ad impressions, clicks, and interactions;
app and device information such as model, operating system, and app version.

Where required by law (for example in the EEA and the UK), the app asks for your consent through Google’s User Messaging Platform before personalised ads are requested. You can revisit or withdraw that choice from the privacy settings entry in the app when it is available for your region, or from your device settings. You can also reset or delete your advertising ID in Android settings.

For more information, see Google’s How Google uses information from sites or apps that use our services and the Google Privacy Policy.

We do not receive your individual ad profile from Google. We may receive aggregate reports about how ads performed.

Cookies and similar technologies

The website does not set cookies and does not use local storage, analytics, tracking pixels, or third-party embeds. There is no cookie banner because there are no cookies to consent to.

The app stores settings, your consent state, and your device keys locally on your device. The AdMob and User Messaging Platform SDKs may store identifiers and consent state on your device as described in Google’s policies.

Because the website does not track you across sites, there is nothing to opt out of there. We do not respond differently to “Do Not Track” or Global Privacy Control signals on the website, as no cross-site tracking takes place.

We share data only as needed to run the Service:

Google — AdMob for advertising, Google Play for billing and distribution, and the User Messaging Platform for consent. Google acts under its own policies.
Hosting and infrastructure providers — for the website, control plane, and servers, under data-processing terms.
DNS resolver operators — our upstream providers receive queries from the resolver’s IP address, not from your device, and do not receive your device identity.
Email and support providers — to receive and answer your messages.
Professional advisers — lawyers, auditors, and insurers, where necessary and bound by confidentiality.
Authorities — where required by law, a valid legal process, or to protect rights, safety, and the integrity of the Service. We review requests and disclose only what is legally required and available to us.
A successor — if Nitronet is merged, acquired, or reorganized, data may transfer as part of that transaction, subject to this policy.

We do not sell personal information. We do not share VPN traffic, DNS query names, or browsing history with advertisers or data brokers, because we do not have them.

International transfers

Nitronet serves users globally, so data may be processed in countries other than yours. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision. You can ask us for more information about the safeguards that apply to a specific transfer.

How long we keep data

Retention is designed to be short:

device records: 90 days after last seen, or 90 days after revocation;
leases and client IP/port records: 24 hours after release or expiry;
request, security, and audit logs: up to 30 days;
aggregate counters: up to 13 months, without device labels;
support email: up to 24 months after resolution;
encrypted backups: up to 35 days.

When a retention period ends, records are deleted or aggregated. Backups may retain residual copies until they rotate out. Legal holds and mandatory record-keeping can extend retention where the law requires it, and we will say so if that applies to your request.

Security

We protect data with:

modern, well-established VPN encryption for the traffic between your device and the VPN server;
encrypted connections for our services and this website;
isolated, hardened servers and least-privilege access;
encrypted storage for local keys and tokens;
logging that excludes payloads, DNS query names, and destination addresses.

One limitation you should know: in version 1, connection control messages are authenticated but not encrypted. An observer on the path may see pseudonymous device IDs, public keys, assigned addresses, and connection IDs. Your internet traffic inside the tunnel remains encrypted. We do not claim that every byte on the wire is encrypted, and Play’s Data Safety answer reflects this.

No service is perfectly secure. If you find a vulnerability, contact hello@nitronet.app. Please do not access other users’ data, disrupt the service, or publish details before we have had a chance to fix the issue.

Your rights

Depending on where you live, you may have the right to:

access the personal data we hold about you;
correct inaccurate data;
delete your data;
restrict or object to processing;
receive a portable copy of data you provided;
withdraw consent for advertising;
complain to a supervisory authority.

To exercise a right, email hello@nitronet.app. Because there are no accounts, we may need the device ID shown in the app’s Settings to locate your device record. Never send private keys, tokens, or packet captures. We will ask for the minimum needed to verify the request and will not use the request itself for marketing.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data-protection authority. We would appreciate the chance to resolve it first.

California and similar US state rights

If you are a California resident, you may have the right to know what personal information we collect, to delete it, to correct it, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. We do not sell personal information and we do not share it for cross-context behavioural advertising ourselves. We do not collect sensitive personal information for the purpose of inferring characteristics. You may use an authorised agent; we may ask for proof of authorisation. Requests can be sent to hello@nitronet.app. Similar rights may apply in other US states, and we will honour them as required by local law.

Deletion, reset, and your device identity

There are no accounts to delete. You can still remove your data:

Reset identity in the app. This deletes your local keys and token and makes the app register as a new device on its next connection. The old device record becomes revocable.
Uninstall the app. This removes local data from your device.
Ask us to erase a device record. Email hello@nitronet.app with the device ID shown in Settings. We can delete the control-plane device row, revoke the token, and bump the revocation epoch so the identity cannot be renewed.

After erasure, active leases still expire under their normal schedule: 24 hours after release or expiry. In the worst case, a lease granted just before the request can take about 48 hours to disappear. Security and audit logs may retain residual entries for up to 30 days, and encrypted backups for up to 35 days. Google controls AdMob data and Google Play purchase records under its own retention rules; we cannot delete those on your behalf.

This page is a privacy-rights path, not an account-deletion page, because Nitronet has no accounts.

Children

The Service is for adults aged 18 and over. It is not directed to children, and we do not knowingly collect data from children. If we learn that a child has used the Service, we will delete the associated device record. Contact hello@nitronet.app if you believe a child has provided data.

Changes to this policy

We may update this policy when the Service, the law, or our processors change. The effective date, last-updated date, and version at the top of this page show the current edition. For material changes we will provide notice in the app or on this website before the change takes effect. Previous versions are available on request and remain in the public repository history.

Contact and complaints

Contact: hello@nitronet.app

We aim to respond within 30 days. If you are not satisfied with our response, you may complain to your local supervisory authority or, in California, to the California Privacy Protection Agency.