Privacy Policy
Proto VPN · Last updated 7 August 2026
This policy explains what Proto VPN (the pro.protovpn.app Android app and the app.protovpn.pro web app) collects, why, and what control you have over it. It is written to be read, not to be survived.
What we never collect
Proto VPN is a VPN service, so this list matters more than the one after it. We do not log, store, or have any way to retrieve:
- Your browsing history — which sites or apps you use through the VPN.
- The contents of your traffic — it travels inside an encrypted tunnel we cannot read.
- DNS queries — resolved by third-party resolvers, not by us.
- The IP addresses you connect from, and therefore any link between an IP address and your account.
This is an architectural property, not a promise about our intentions: the data is not written anywhere, so it cannot be produced on request — by anyone, for any reason.
What we collect
| Data | Why | Required? |
|---|---|---|
| Email address | The only way to sign in and recover your account | Yes |
| Account identifier | Links your devices and subscription to you | Yes |
| Device labels and platform | Shows which devices are connected, lets you remove them | Yes |
| Amount of traffic used | Enforces plan limits — daily totals only, never per-connection | Yes |
| In-app events (screens opened, buttons tapped) | Tells us which parts of the app work and which do not | Yes |
| Payment records | Proof of purchase and legal accounting | Only if you pay |
| Advertising identifier, approximate region, ad diagnostics | Serving rewarded ads — see below | No |
Your email address and phone number, if you provide one, are encrypted before they are written to our database (AES-256-GCM). We never receive your full card number or CVV — payment details go directly to the payment provider, and we keep only the last four digits and the provider's transaction reference.
Rewarded ads
If you choose to watch an ad in exchange for traffic, the Google Mobile Ads SDK (AdMob) starts and collects your device's advertising identifier, an approximate location derived from your IP address, your interactions with the ad, and technical diagnostics. That data goes to Google, which uses it to select and measure ads.
This only happens when you tap to watch an ad. The ad SDK does not run otherwise. If you never watch one, none of this is collected. You can also reset or delete your advertising ID at any time in your Android settings.
Who else sees your data
We do not sell your data and we do not share it for anyone else's marketing. We do use:
- Google (AdMob) — rewarded ads, as described above.
- An email delivery provider — receives your email address so we can send your sign-in code.
- Payment providers — receive whatever they need to process a payment, if you make one.
- Our hosting provider — stores our encrypted database on our behalf.
We may disclose data if we are legally required to. Note what this means in practice: a lawful request can only reach what exists, which is your account record and payment history — not your browsing, and not the addresses you connected from.
How long we keep it
| Data | Kept for |
|---|---|
| Account details (email, devices) | Until you delete your account |
| Traffic totals | 90 days |
| Error and access logs (no account identifiers, no IP addresses) | 7–30 days |
| Payment records | As long as accounting law requires |
Deleting your account
You can delete your account from inside the app, or on our account deletion page — that one needs no app installed and no active session, just access to your email. When you do, we immediately and permanently erase your email address, phone number, and sign-in identity; revoke every device; delete your VPN access so existing connection links stop working; and end all active sessions. None of this is recoverable.
What survives: payment records, for the legal retention period above. They are kept against a random account identifier that is no longer connected to any personal detail — after deletion, those rows cannot be traced back to you.
Any remaining paid subscription time is forfeited: deletion removes your VPN access immediately and there is no refund for the unused part.
Your rights
You can ask us to show you the data we hold about you, correct it, or delete it. To do that, or to ask anything about this policy, write to privacy@protovpn.pro — we answer within 30 days.
Children
Proto VPN is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
Changes
If we change this policy we update the date at the top. Changes that meaningfully affect how we handle your data will be announced in the app before they take effect.