CulvertVPN
Privacy Policy
Last updated 13 August 2026
CulvertVPN is built to keep your browsing private. This policy explains, plainly, what we
collect, what we deliberately do not, and the choices you have.
The short version. We do not log your DNS queries, your browsing history,
or the contents or destinations of your traffic. Our VPN servers only ever see an opaque
connection id — never your identity. We do keep your IP address for a limited time to prevent
abuse, and — only if you turn it on — we collect app analytics. Details below.
What we collect
- Account. A free account is anonymous — it is keyed to a device key generated on your
phone, with no name or email. You only give us an email address if you choose to register
for Premium, and we use it solely to send you a sign-in code.
- Your IP address. We record the source IP address of your connection so we can respond to
abuse complaints. This is a form of connection log. It is erased automatically after 30 days.
- Which location you connect to and how much data your session used, to operate and
balance the service. Per-connection records are deleted within 24 hours and kept only as
anonymous daily totals after that.
- Payments. Premium is billed through Google Play. Google handles your payment details —
we never see your card. We receive a purchase token to confirm your subscription is active.
- Connection diagnostics. When a connection attempt finishes, the app reports its outcome
to our own servers — which connection methods were tried, whether each worked, how long they took,
and a coarse network type (Wi-Fi or mobile — never a network name or operator). This tells us when
a server or connection method is failing so we can fix it. Raw reports are erased automatically
after 30 days; only anonymous daily totals are kept. These reports never include the websites
you visit, your DNS queries, or the contents of your traffic.
- Analytics and crash reports (optional). If you leave analytics enabled in Settings, the
app sends usage events and crash reports to Google Firebase (Analytics and Crashlytics). This can
include device and advertising identifiers, your IP address, and app-interaction events. You can
turn this off at any time in Settings → Privacy, and no browsing or tunnel data is ever
included.
What we do NOT collect
- We do not log the websites or apps you visit, your DNS queries (query logging is compiled
out of our resolver), or the contents of your traffic.
- Our exit servers hold no record that ties a connection to you — seizing one yields only
opaque connection ids.
How we use your information
To provide and operate the VPN, prevent fraud and abuse, process your subscription, respond to
support requests, and — if enabled — understand and improve the app.
Who we share it with
We do not sell your data. We share limited data with service providers who help us run
CulvertVPN: Google (Google Play billing and, if enabled, Firebase analytics/crash
reporting) and our transactional email provider (to deliver sign-in codes). We may disclose
information if required by law.
How long we keep it
Your IP address is erased after 30 days. Per-connection records are deleted within
24 hours and retained only as anonymous aggregates. Connection-diagnostic reports are
erased after 30 days, leaving only anonymous daily totals. Account and subscription
records are kept while your account exists.
Your choices
- Turn off analytics in Settings → Privacy at any time.
- Delete your account and its data from within the app.
- Contact us to ask what we hold about you.
Children
CulvertVPN is not directed to children under 13 (or the minimum age in your country), and we do
not knowingly collect their data.
Changes
We may update this policy; we will change the date above and, for material changes, notify you
in the app.
Contact
Questions? Email privacy@culvertvpn.com.