We don't log your VPN traffic. We collect what we need to run an ad-supported free app: anonymous crash reports and ad SDK identifiers. We don't sell your data. There is no account. The rest of this page is the legally precise version.
1. TL;DR
You're installing a free, ad-supported VPN. To run it without charging you, we collect a minimum set of operational and ad-related data. We do not log your VPN traffic, your IP, your DNS queries, the websites you visit, or your session times. We don't have an account system, so there's no profile attached to you.
2. Who We Are
Data controller: ClownVPN, Inc. (a Delaware C-Corp). Contact: privacy@clownvpn.com.
This policy covers the ClownVPN mobile app (Android, with iOS forthcoming), this website (clownvpn.com), and any related services we operate.
3. What We Do Collect
3.1 Anonymous crash & performance reports
If the app crashes, we receive an anonymized crash report containing: OS version, device model class (e.g. "Pixel 7" or "Samsung Galaxy A54"), app version, the stack trace at the moment of crash, and a randomly generated install ID. No personal identifiers, no IP address.
3.2 Ad SDK identifiers
The app shows ads from third-party ad networks (currently Google AdMob). These SDKs receive a device advertising identifier (Android Advertising ID), which you can reset or opt out of in your device settings at any time. We do not have access to the underlying ad targeting data.
3.3 Aggregated, non-identifiable usage stats
We count totals such as: how many devices are connected at peak hours, which servers see the most load, daily active users. These numbers are aggregated and cannot be tied back to any specific user.
3.4 Email (only if you sign up for a waitlist)
If you enter your email on our iOS or Windows waitlist, we store it for the sole purpose of notifying you when that platform launches. We delete the email within 30 days of sending the launch notice (or earlier on request).
4. What We Don't Collect
- Your originating IP address
- The IP address you connect through (assigned VPN IP)
- The websites or services you visit
- The contents of your DNS queries
- The amount of data you transfer
- Session start/end timestamps
- Connection logs of any kind
- Your name, age, gender, or any identity data
- Account credentials (we don't have accounts)
- Payment information (we don't take payments)
5. How We Use What We Collect
- Crash reports — to fix bugs.
- Ad SDK data — to show ads that fund the free service.
- Aggregate stats — to plan server capacity and improve performance.
- Waitlist email — to notify you of platform launches. Then deleted.
We do not use any of this data for personalized marketing, profiling, credit scoring, or any decision that affects your rights.
6. Who We Share With
We share data only with these categories of recipients:
- Crash reporting: Sentry (or equivalent). Crash payloads only.
- Ad networks: Google AdMob. Subject to their own privacy policies.
- Cloud hosting: Cloudflare (website), bare-metal VPN nodes (our own).
- Legal authorities: only when required by a valid court order issued in our jurisdiction. Since we have no VPN traffic logs, there is nothing meaningful to hand over even if compelled.
We do not sell, rent, or trade personal data. Ever.
7. Ads & Tracking
The app is funded by in-app advertising. Ads are served by Google AdMob. You can reset your advertising ID or opt out of personalized ads in:
- Android: Settings → Privacy → Ads → Reset / Opt out
- iOS (when available): Settings → Privacy & Security → Apple Advertising
The website (clownvpn.com) does not use any third-party trackers, analytics, or cookies beyond a single first-party preference cookie.
8. Data Retention
- Crash reports: kept for 90 days, then permanently deleted.
- Aggregate usage stats: kept indefinitely (cannot be tied to an individual).
- Waitlist emails: kept until launch notice is sent + 30 days, then deleted.
- VPN session data: never logged, so nothing to retain.
9. Security
All VPN traffic is encrypted with AES-256-GCM (OpenVPN) or ChaCha20-Poly1305 (WireGuard). Both are modern, peer-reviewed ciphers. Crash reports and aggregate stats are transmitted over TLS 1.3. Internal data stores are encrypted at rest.
Despite best efforts, no system is perfectly secure. We disclose confirmed breaches that affect users within 72 hours of discovery.
10. Your Rights
If you're in the EU/EEA, UK, California, or other jurisdictions with modern privacy laws, you have the right to:
- Request a copy of any data we have about you
- Request correction or deletion
- Object to processing
- Withdraw consent for waitlist emails at any time (we honor that immediately)
Email privacy@clownvpn.com. We respond within 30 days. Note: most of these requests resolve as "we don't have the data you're asking about" because we genuinely don't.
11. Children
ClownVPN is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.
12. Changes To This Policy
We may update this policy when we add features, change ad partners, or laws require it. Material changes will be announced in-app and on this page at least 30 days before they take effect. The "Last updated" date at the top reflects the most recent version.
Last updated: June 8, 2026
13. Contact
Questions about this policy or your data:
- Email: privacy@clownvpn.com
- General support: support@clownvpn.com
- Mailing address: ClownVPN, Inc., [legal address to be added], Delaware, USA
This policy is drafted as a working starting point. Before public launch, have it reviewed by a privacy attorney in your jurisdiction and fill in the company legal address, ad partner list, and any jurisdiction-specific rights sections (CCPA, CPRA, LGPD, etc.).