Privacy, without the fine-print fog.

Still VPN uses Android's VpnService to create a device-level VPN interface after you tap Connect and approve Android's VPN permission. While connected, traffic from apps on your device is routed to the VPN server you selected.

The selected VPN server must process your source IP address, destination addresses, connection timing, and traffic volume while the connection is active so that it can route traffic and return responses. The Android app does not save the contents of your VPN traffic or a history of the websites and services you access.

Configuration requests

When Still VPN requests its server list, version information, or other remote configuration, it sends the following technical information:

• App version and build number
• Android version and device model
• App platform, language, region, and time zone
• Network type, such as Wi-Fi or cellular
• VPN connection state and request timestamp
• The public IP address necessarily visible to the receiving server

We use this information to return compatible configuration, maintain the service, diagnose failures, prevent abuse, and enforce service limits. The app does not send your Android contacts, photos, precise GPS location, microphone data, or browsing history in these requests.

Exit-node map

The “Your IP location” map shows coordinates assigned to the selected VPN exit node. It does not read or display your device's GPS location. When you open the map, the app requests a map style and map tiles from OpenFreeMap. That request necessarily reveals the current public IP address, ordinary request metadata, and the map area needed to return the requested tiles to OpenFreeMap and its delivery provider.

Google Play purchases

When you view subscription plans, buy a plan, or restore a purchase, the app exchanges product identifiers, offer information, purchase status, and a purchase token with Google Play Billing. Google processes your payment details; Still VPN does not receive your full payment-card information.

Anonymous analytics and crash diagnostics

After you agree to the first-launch privacy notice, Still VPN enables Google Analytics for Firebase and Firebase Crashlytics to understand basic app usage and improve reliability. Before that agreement, collection by both services is disabled.

• A random app-installation or app-instance identifier
• App version, Android version, device model, language, and session information
• Basic app interactions, such as screens opened, configuration success or failure, VPN connection result, and subscription-flow result
• In-app purchase and subscription events reported automatically by Google Play and Google Analytics
• Crash stack traces, native crash minidumps, diagnostic state, and crash timing
• Approximate location derived by Google Analytics from a masked IP address; the app does not request GPS location

We do not set a Firebase user ID or send an email address, account name, advertising ID, VPN server address or identifier, SNI or host value, browsing destination, VPN traffic content, purchase token, order identifier, or raw error text in our custom analytics and diagnostic events. Advertising personalization signals are disabled.

Information stored on your device

The app stores your selected server, onboarding and consent status, VPN status, subscription entitlement, encrypted remote configuration, and limited app state in Android local storage. This information remains on the device until it is replaced, cleared through Android settings, or removed when you uninstall the app. Still VPN disables Android backup for this app data.

Advertising

The free version may show app-open or interstitial ads supplied by Google Mobile Ads. Ad availability, placement, and frequency are controlled by encrypted remote configuration. Premium users do not receive these ads.

Google Mobile Ads and Google's User Messaging Platform may process app and device information, the public IP address and IP-derived approximate location, advertising or app-instance identifiers where available, ad impressions, clicks, consent choices, and diagnostic or performance information to deliver, measure, secure, and limit ads. Where required, the app presents Google's consent message before requesting ads and provides a “Privacy choices” entry in Settings.

Still VPN does not send Google Mobile Ads the contents of VPN traffic, the websites or services reached through the VPN, VPN server credentials, or a destination history, and does not use those data to select ads.

• VPN permission: Creates and controls the VPN tunnel after your approval.
• Internet: Connects to configuration services and VPN servers.
• Network state: Detects whether the device is using Wi-Fi, cellular, or another network.
• Foreground service: Keeps an active VPN connection running in the background.
• Notifications: Shows the required ongoing VPN status notification on supported Android versions.

Still VPN does not request precise or approximate device location, Wi-Fi state, contacts, camera, microphone, storage, or boot-completed permission. Google Mobile Ads may use Android's advertising ID when the operating system makes it available; you can reset or delete that identifier in Android's privacy settings. The map feature does not require device location permission.

We use service providers only where needed to operate or distribute the Android app:

• Cloud infrastructure and VPN hosting providers host the configuration API and VPN servers. They process the technical request data and active-session routing data described above only as needed to provide, secure, and maintain the service.
• Google Play Billing provides localized subscription offers, processes purchases, and returns purchase status to the app. Google handles payment information under its own policies.
• Google Analytics for Firebase processes app-instance identifiers, app interactions, device and app information, purchase events, and IP-derived approximate location to provide aggregated usage and reliability reports. The Android app disables advertising ID collection and advertising-personalization signals, and does not set a Firebase user ID.
• Firebase Crashlytics processes installation identifiers, crash traces, native crash minidumps, app and device information, and diagnostic state so we can identify and fix crashes in both the app and its VPN process.
• Google Mobile Ads and User Messaging Platform deliver and measure ads for free users, apply fraud prevention and frequency controls, and present privacy or consent choices where required. They may process the advertising and consent data described above under Google's policies.
• MapLibre is the open-source map renderer included in the app. Still VPN does not enable its device-location component.
• OpenFreeMap supplies the map style and tiles when you open the exit-node map. OpenFreeMap states that it does not store IP addresses in ordinary server logs, but may temporarily enable IP logging for a security incident for up to 30 days; it may also use Cloudflare to deliver map resources. See the OpenFreeMap Privacy Policy.

These providers may process technical data on our behalf or as independent controllers under their own terms. We do not sell personal data and do not give an advertising provider the contents of your VPN traffic or your VPN destination history.

Local app settings remain until they are replaced, you clear the app's data, or you uninstall it. Still VPN does not persist account data, source IP addresses, VPN destinations, traffic contents, or a user activity profile on its application servers. Technical data needed to return configuration or route an active VPN connection is processed for that request and is not retained by Still VPN after the request or connection ends.

OpenFreeMap controls retention of its own map-delivery records as described in its privacy policy. Google controls billing and transaction records under its policies and legal obligations. Firebase Crashlytics generally retains crash traces, extracted native minidump data, and associated installation identifiers for 90 days before removal begins. Google Analytics retention is controlled by the retention settings for our Analytics property. Google controls advertising identifiers, consent records, ad delivery and measurement data under its applicable policies and retention settings.

Because Still VPN does not create an account or retain a server-side user profile, there is no Still VPN account or stored server-side profile to delete. Data stored only on your device can be removed immediately by clearing Still VPN's app data in Android settings or uninstalling the app.

Configuration requests use HTTPS, and remote configuration cached by the Android app is stored in encrypted form. VPN traffic is handled according to the protocol and route shown by the service. Data may be processed in countries where our service providers and VPN servers operate.

Still VPN is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Android policy when the app, service providers, or legal requirements change. We will post the revised policy at this URL, update the date above, and provide an in-app notice when a change materially affects how personal or sensitive data is handled.