Informativa sulla privacy dell’app

This Privacy Policy explains how Libraprox ("we", "our", or "us") collects, uses, and safeguards information related to your use of our iOS, macOS, and Android applications and VPN tunnel services.

★ Zero Traffic Logs

Your privacy is our core mission. Libraprox maintains a strict Zero Traffic Logs commitment. We do not inspect or retain the content of your VPN activity. Specifically:

• No Traffic Logging: We do NOT log, monitor, capture, or store your browsing history, web traffic, destinations visited, data content, or DNS queries.
• No Traffic or Bandwidth Logs: We do not store VPN session bandwidth totals or records of the websites, services, or DNS queries you access. We do collect limited connection reliability telemetry linked to your app account identifier; it records connection events and the selected VPN server, separately from VPN traffic content and browsing destinations.
• No IP Storage on VPN Gateways:Our VPN gateways do not store your device's public IP address in VPN connection logs. Advertising and network providers may process IP addresses independently to provide their services, as described below.
• Volatile RAM-Disk Infrastructure: Our VPN gateways operate strictly on volatile memory. Standard diagnostic logging is completely disabled on the physical storage layer (SSD/HDD) of the operating system. Any temporary operational errors needed to maintain server health are directed exclusively to RAM disks (`tmpfs`) and are permanently and irreversibly destroyed upon system reboot or power interruption.

1. Information We Collect and Process

To run our apps, authorize subscription features, and establish secure VPN connections, we process only the minimal necessary data:

• Guest Accounts: The app creates a random, device-scoped guest account identifier to authenticate VPN service and associate account settings and connection reliability records. The identifier is pseudonymous and may be linked to those records. Guest mode does not require your name, personal email address, or phone number.
• Account and Device Information: You may create a full account with email and password; on Apple platforms, you can also sign in with Apple. We process the email address used for registration or provided by Apple; email-and-password signups must verify the address before signing in. Passwords are handled by PocketBase authentication and are not stored in readable form. When the app requests VPN configuration, it sends device model or platform, operating-system version, and app version, which are associated with the account for service operation and troubleshooting.
• Connection Reliability Telemetry: To maintain the service, we store a random event identifier, the selected VPN server, connection event type (such as attempt, success, error, or disconnect), a server-recorded timestamp, optional session duration, and a normalized diagnostic code. These records are linked to your app account identifier. Raw event records are automatically deleted after 30 days. Per-server attempt, success, and duration totals, account-level connection counts, the most recent successful-connection time, and the latest normalized diagnostic may remain until the associated app account is deleted. We use this information for connection reliability, retry handling, and capacity planning, not to identify websites or services you visit.
• Subscriptions: In-app purchases are processed by the Apple App Store, Mac App Store, or Google Play, depending on your platform. Website purchases use RevenueCat Billing, which uses Stripe as its payment gateway. RevenueCat processes a pseudonymous app account identifier and subscription entitlement information to synchronize Pro access. RevenueCat and Stripe may process billing contact information, payment details, transaction records, invoices, and subscription status under their own terms. Libraprox does not receive or store full payment-card numbers.
• Advertising (Free Tier): The free tier on iOS and Android may display Google Mobile Ads. The ads SDK may process device and advertising identifiers, IP address, app interactions, and diagnostic information for ad delivery, analytics, and fraud prevention. Pro users do not receive ads.

2. Service Providers and Data Sharing

Our backend processes account details, VPN configuration data, connection telemetry, and subscription synchronization data to provide the service. RevenueCat processes a pseudonymous account identifier and subscription information for entitlement checks. Apple and Google Play process store purchases and payment details under their own terms. For website purchases, RevenueCat Billing and Stripe process payment and subscription information under their own terms. Google Mobile Ads may collect and share IP address, app interactions (including launches, taps, and ad views), diagnostic information, and device or account identifiers with Google and advertising partners. Android may include the Android Advertising ID and App Set ID; on iOS, the ads SDK may use Apple's advertising identifier where available and permitted by platform privacy controls. We do not sell account data or send VPN connection events to the ads SDK.

3. How We Use Information

We process the minimal data collected strictly to:

• Set up and manage the IKEv2/IPsec VPN connection you request through your device’s VPN capabilities.
• Verify and synchronize active Pro subscription entitlements.
• Diagnose connection reliability and prevent retries from being counted twice.
• Monitor general server loads to ensure stable network performance.
• Show advertisements to support the infrastructure costs of the free tier.

4. Account Deletion and Data Retention

Full-account users can visit the Libraprox account dashboard at libraprox.com/account to manage their account or request deletion. The web deletion flow removes the Libraprox account and associated VPN configuration, account-linked connection records, and entitlement records, and revokes VPN credentials. Guest users can request deletion by contacting [email protected] with their guest account identifier.

An active subscription must be cancelled with its billing provider—Apple, Google Play, or RevenueCat Billing—and Pro access must expire before account deletion can complete. Deleting your Libraprox account does not cancel a subscription. If subscription status cannot be verified or VPN credentials are still being removed, the deletion flow pauses and you can retry; contact support if the problem continues.

• Connection Event Retention: Raw connection-event records are automatically deleted after 30 days. Per-server aggregates and account-level connection statistics remain until the associated account is deleted.
• Guest Account Retention: Guest identifiers are device-scoped. When a guest account is linked to a full account, the old guest record is disabled and purged after the configured retention period, which defaults to 30 days. Active guest accounts are not automatically deleted for inactivity. Guest users may request deletion through support.
• Billing Records: Apple, Google Play, RevenueCat, and Stripe may retain transaction or subscription records under their own retention policies. Account deletion does not cancel a subscription.

5. Regional Restrictions

The app uses the time-zone identifier configured on your device as a coarse regional restriction check; it does not use GPS or request location permission for this check. When that identifier matches one of the time zones currently restricted by the app—covering mainland China, Russia, North Korea, Turkmenistan, Belarus, Iraq, Oman, Turkey, and the United Arab Emirates—the app shows a service-unavailable screen and disables access to app services and advertising. A device time zone is user-configurable and is not a reliable way to determine someone’s physical location, so this check may not reflect where you are actually located.

6. Contact Us

If you have any questions or require clarification regarding our App Privacy Policy, please contact our support desk:

Email: [email protected]