1. Introduction
By installing or using CrossVPN, you agree to this Privacy Policy. If you do not agree, please do not use the App.
CrossVPN is a VPN utility that helps you establish encrypted connections, select servers, configure per-app routing, and optionally share connectivity via local Wi‑Fi proxy features. We are committed to transparency about what data the App and our service providers process.
Data controller: CrossVPN developer team (publisher of
com.szwl.crossnet).
2. Information we collect
We do not require you to create an account to use core VPN features.
| Category | Examples | Source |
|---|---|---|
| Device & app | Device model, OS version, app version, language, install channel (debug/release), anonymous device identifier (random UUID stored locally) | App / bootstrap API |
| Diagnostics | Crash reports, stack traces, performance and stability logs | Firebase Crashlytics |
| Analytics | Feature usage events (e.g. connect/disconnect taps, screen views, ad impressions) — not the content of your browsing | Firebase Analytics |
| Advertising | Advertising ID (AD ID), ad interaction and revenue signals when ads are displayed | Google AdMob / Google Mobile Ads |
| Local settings | Theme, language, selected server, app proxy rules, dismissed notices — stored on device | Device storage |
| Installed apps (local) | Names and package names of apps with a launcher icon, only to display the per-app proxy list on your device | Device (not uploaded as a full app list by default) |
When the App checks for configuration updates, it may send:
platform, version code/name, language, package name, channel, and the
anonymous device_id to our bootstrap endpoint to deliver
notices and update prompts.
3. VPN & network traffic
We do not sell your personal information. We do not use the content of your VPN sessions for advertising profiling.
- VPN operation: When you connect, network traffic you route through the tunnel is encrypted between your device and the server you select. We do not operate a centralized “activity log” of websites you visit inside the App.
- Third-party servers: VPN nodes may be operated by independent providers. Those operators may process connection metadata (such as timestamps, bandwidth, and IP addresses assigned for the session) as needed to deliver the service. Their practices are outside our direct control.
- No intentional content collection: We do not intentionally collect or store the contents of your encrypted VPN traffic for marketing purposes.
- Wi‑Fi sharing: If you enable local hotspot/proxy sharing, traffic from connected devices on your local network may pass through your device. You are responsible for securing your local network and complying with applicable laws.
4. How we use information
- Provide, maintain, and improve VPN connectivity and App features
- Deliver server lists, configuration updates, and in-app notices
- Diagnose crashes, fix bugs, and measure performance
- Understand aggregated product usage to improve UX
- Display advertisements (where enabled) and measure ad delivery
- Comply with legal obligations and enforce our terms
Legal bases (EEA/UK users): performance of a contract (providing the App), legitimate interests (security, analytics, product improvement), and consent where required (e.g. personalized ads or optional permissions).
6. Android permissions
The App may request the following permissions and uses them as described:
- Internet & network state — VPN connectivity and server communication
- VPN service (TUN) — create encrypted tunnel (core function)
- Foreground service — keep VPN active while connected
- Notifications — connection status and service alerts
- Wi‑Fi / nearby devices — local hotspot sharing (not used for GPS tracking; location flags set to neverForLocation where applicable)
- Advertising ID — ad measurement when ads are shown; you can reset or limit ad personalization in Android settings
- Package visibility (queries) — list launcher apps for per-app proxy selection on device only
7. Data retention
Local preferences remain on your device until you clear app data or uninstall.
Diagnostic and analytics data retained by Google Firebase follow Google’s retention settings.
Bootstrap device_id persists locally until app data is cleared.
We retain information only as long as necessary for the purposes above or as required by law.
8. Security
We use commercially reasonable technical and organizational measures to protect information. VPN traffic is encrypted in transit through the tunnel you establish. No method of transmission or electronic storage is 100% secure.
9. Your choices & rights
- Clear app data or uninstall to remove local settings
- Reset/limit Advertising ID in Android Settings → Privacy → Ads
- Disable notifications in system settings
- Request access, correction, or deletion of personal data we control by contacting us
- EEA/UK/California residents may have additional rights under local law (access, portability, objection, erasure)
We will respond to verified requests within a reasonable time as required by applicable law.
10. Children’s privacy
CrossVPN is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated in the App. Continued use after an update means you accept the revised policy.
12. Contact us
For privacy-related questions, data requests, or complaints:
Package: com.szwl.crossnet