Privacy Policy

The ESSL VPN service is dedicated to protecting user data security. Therefore, we must clearly inform you about the data we collect and process.

Summary

The application does use third-party services, which may collect some of your information. These third parties include Meta (Audience Network), AdMob, Firebase, and others. For detailed information on what data is collected by these third parties, please carefully review the privacy policies of the respective service providers. The links to these policies can be found at the end of this privacy policy.

ESSL VPN is dedicated to safeguarding your online security. In the following sections, we will clearly inform you about our policies regarding the collection, use, and disclosure of personal information.

By choosing to use our Service, you agree to the collection and use of information in relation to this policy. The Personal Information we collect is used for providing and improving the Service.

We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms of Service, unless otherwise defined in this Privacy Policy.

Information We Collect

To provide a better experience, while using our Service, we may collect certain information.

IP Address

To optimize your connection experience, we temporarily collect your IP address to help our system select the most suitable VPN server node, ensuring better speed and stability. Your IP address is only used during the session and is deleted immediately after the session ends.

Account Information

You can use our services without registering an account.

User Interaction Data

We collect information about how you interact with our application and any advertisements we may publish. For example, we may track which user interface elements are clicked.

Device Information

We only collect a non-reversible device hash, but our advertising partners may collect your device information, such as device model, device settings, operating system, network information, and application version number.

Device Hash

We randomly generate a unique device hash for each device to identify the connected device and assign the optimal VPN server node. This hash is not linked to your personal identity and is used solely to improve connection performance. It will not be used to track your browsing activity, nor will it store any personal data.

Advertising Identifiers

Our advertising partners may collect your device advertising identifiers for marketing and analytics purposes. Google allows you to disable your advertising identifier through your Google account settings.

VPN Usage Information

We do not record your VPN browsing activity, such as the websites or apps you visit through the VPN. However, we may collect diagnostic data, including connection speed, latency, connection success, and error reports, to improve the service.

User Communication

When you contact us via chat or email, we will use the information to respond to your requests.

Non-sensitive Financial Information

When you subscribe to our premium services, we collect non-sensitive financial information related to your transactions, including your subscription plan, Order ID, purchase date, and subscription status. Please note that we do not collect or store your credit card numbers or specific payment method details — all payment processing is handled by Google Play.

How We Use Your Information

The information we collect is used to:

• Provide, maintain, and improve our services.
• Respond to your comments, questions, and requests when you contact us via email or other means.
• Advertising services: We may use your information to improve our advertising and marketing services, and we may also use the information to develop marketing campaigns, such as check-ins and inviting new users. It is important to note that we do not log or store your browsing activities while using the VPN (such as the websites you visit and the applications you use); your activities while using our VPN are encrypted.
• When you subscribe to our premium services, the collected data is used to:
  • (i) verify your membership to unlock global VPN nodes and premium features;
  • (ii) manage your subscription cycles and auto-renewals;
  • (iii) prevent abuse and fraudulent activities to ensure account security.

Third-Party Advertising Services

Our VPN service may display advertisements through third-party advertising services. Rest assured, we do not collect your VPN browsing activities, nor do we share information about your VPN browsing activities with advertising service providers. However, advertising service providers have access to relevant information about the ad placements, such as which applications their ads were displayed in, as well as certain specific device information.

In order for advertisements to be displayed smoothly in our application, we may use third-party software development kits (SDKs), which may collect the following information from your device or usage:

• Device or mobile advertising identifier.
• IP address. Advertisers may obtain an approximate geographic location based on your carrier. However, when you use the VPN service, your IP address may be replaced with one from a different location.
• Device information, such as brand, model, operating system version, language, and more.
• Name of the application where the ads are displayed.

Some advertisers may personalize ads based on your mobile advertising identifier or IP address, which is why you may see the Ad Choices icon on the ads. You can click on the icon to learn more about the advertising network providing the ads, their privacy policies, and your options for opting out of personalized advertising. If you opt out of personalized ads, you may still see non-personalized ads. Since our free tier is ad-supported, advertising partnerships are a part of our application, and we appreciate your understanding.

Subscription & Payment Data

When you purchase a subscription through Google Play, we collect and process the following data:

• Purchase token — A unique identifier provided by Google Play to verify your subscription status. This is not your payment information.
• Subscription status — Whether your subscription is active, expired, in a trial period, or canceled.
• Product ID — Which subscription plan you purchased (e.g., monthly or yearly).
• Expiry date — When your current subscription period ends.

This information is used solely to: verify your subscription and unlock premium features; manage subscription renewals and status changes; and respond to Real-Time Developer Notifications (RTDN) from Google Play about subscription events.

VPN Service Key Assurances

Log Data

We want to inform you that whenever you use our Service, in the case of an error in the app we collect data and information (through third party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol ("IP") address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Cookies

Cookies are files with a small amount of data, commonly used as anonymous unique identifiers. These are sent to your browser from the websites you visit and are stored on your device's internal memory. This Service does not explicitly use "cookies." However, the app may use third-party code and libraries that use cookies to collect information and improve their services. You have the option to accept or refuse these cookies and be notified when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Data Retention

We retain your personal data for different periods depending on its category and applicable legal requirements. The following schedule summarizes our retention practices:

Category	Retention Period	Reason
Connection metadata (IP, timestamp, session duration)	30 days	Service operation, abuse prevention, aligned with VPN industry GDPR norms
Billing & subscription records	7 years	Legal obligation (tax and accounting retention requirements)
Support tickets & user communications	2 years	Service continuity and historical reference
Crash reports & error logs	90 days	Debugging and stability improvements
Account information	Duration of account + 30 days	Deleted within 30 days after account deletion request

We do not log or retain your VPN browsing activities in any category. After the retention period expires, data is securely deleted or anonymized.

SDKs

SDKs (software development kits) are pieces of software code provided by our advertising networks or other business partners that allow our software to interact with the services offered by these partners. For example, in some of our mobile applications, we may use SDKs to enable our applications to display ads from advertising networks. Sometimes, these interactions will involve the business partner collecting, using, and tracking certain information from the device running the software. For information about the types of data collected and used for advertising purposes, please refer to the sections above.

Service Providers

We may employ third-party companies and individuals for the following reasons:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services;
• To assist us in analyzing how our Service is used.

These third parties may have access to your Personal Information in order to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us with your Personal Information, and we strive to use commercially acceptable means of protecting it. However, please remember that no method of transmission over the internet or electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

For Users in the European Union (EU)

We comply with the General Data Protection Regulation (GDPR) for users in the EU and EEA. You have the following rights regarding your personal data:

• Access: You can request access to your data.
• Correction: You can request corrections to your data.
• Deletion: You can request to delete your data.
• Restriction: You can request to limit how your data is processed.
• Portability: You can request your data in a portable format.
• Objection: You can object to the use of your data for certain purposes.

For any GDPR-related requests, please contact us at support@esslvpn.com.

For Users in California (CCPA)

• Know: Request information on the personal data we collect.
• Delete: Request deletion of your personal data.
• Opt-Out: Opt-out of the sale of your personal data.
• Non-Discrimination: You will not face discrimination for exercising these rights.

To exercise your CCPA rights, please contact us at support@esslvpn.com.

Children's Privacy

These Services do not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If we discover that a child under 18 has provided us with personal information, we will immediately delete this information from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at support@esslvpn.com so that we can take necessary action.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. This policy is effective as of April 17, 2026.