1.1.The dropweb app (the App) is published on Google Play by Pulse, an individual entrepreneur registered in Almaty, Republic of Kazakhstan, and on the Apple App Store by Zeny, TOO (Limited Liability Partnership “Zeny”, BIN 261040015657), registered in Almaty, Republic of Kazakhstan. Each of them is the Publisher (we) of the version distributed through its store.

1.2.This policy explains what the App processes, what leaves your device and where it goes. It does not cover the services of third-party providers whose configurations you add to the App: those providers process data under their own privacy policies.

1.3.Contact: support@dropweb.org.

2.1.The App is a network client built on the open-source Mihomo core. It creates a VPN tunnel on your device and routes your traffic through the servers listed in a configuration that you add yourself — a subscription link, a QR code or a configuration file.

2.2.The App has no user accounts: there is no registration or sign-in, and the App does not ask for your name, email address, phone number or payment details.

2.3.The App contains no advertising, analytics, tracking or crash-reporting software, and it does not send usage statistics to the Publisher or to anyone else.

3.1.The App keeps the following data locally, on your device only:

• ◆subscription links you add — kept in the encrypted storage of the operating system and removed when you delete the profile
• ◆downloaded profiles, routing rules and App settings
• ◆the device identifier (HWID) described in section 4.2
• ◆App and core logs — rotated automatically, with subscription links and other sensitive URL parts redacted

3.2.Logs never leave your device on their own. They are exported or copied only when you choose to do so yourself, for example to send them to support.

3.3.The list of active connections, connection speed and traffic counters are shown on screen from memory and are not sent anywhere.

3.4.Subscription expiry reminders are calculated on your device from the expiry date your provider returns with the subscription. The App does not use push notification services.

4.1.Your subscription provider. When the App downloads or refreshes a subscription, it sends a request to the address in the link you added. The provider's server receives your IP address and a User-Agent with the App name, version and platform.

4.2.Device headers. By default the same request also carries a device identifier (HWID), the operating system type and version, and the device model, so that the provider can limit the number of devices per subscription. The HWID is the first 16 characters of a SHA-256 hash of a stable system identifier (ANDROID_ID on Android, the identifier for vendor on iPhone); the original system identifier is never sent or stored. You can turn these headers off at any time in the App settings (“Send HWID”).

4.3.Your VPN traffic goes to the servers in your configuration. The App does not inspect, record or upload the contents of your traffic, the sites you visit or your DNS queries. The operators of those servers handle traffic under their own policies.

4.4.Connectivity checks. To measure server latency, the App sends a request through the selected server to a test address (by default https://www.gstatic.com/generate_204; you can change it). To show your current public IP address and country, the App queries one of the following services: ipwho.is, api.ip.sb, ipapi.co, ipinfo.io. These requests contain no personal data; the services see only the IP address the request comes from — when the tunnel is on, that is the address of your VPN server.

4.5.Links you open. Links in the App, including support links provided by your subscription provider, open in your browser or in the linked app and are governed by the policies of those sites.

4.6.None of the data described in this section is sent to the Publisher.

5.1.If you write to support@dropweb.org, we receive your email address and whatever you include in the message, such as logs you decided to attach. We use them only to answer you and delete the correspondence once your request is resolved, or earlier if you ask us to.

6.1.We do not sell, use or disclose to third parties any user data for any purpose, including advertising. Apart from support correspondence, the Publisher holds no data about users of the App.

7.1.Data on your device stays there until you delete a profile, clear the App data or uninstall the App. Because the App has no accounts, there is no account to delete.

7.2.To access or delete data held by your subscription provider, contact that provider.

8.1.The App is not directed at children under 13, and we do not knowingly receive data from them.

9.1.We will publish any change on this page and update the date at the top. If a change affects what data leaves your device, we will also mention it in the App release notes.