Privacy Policy
Last updated: 10 November 2026
This policy explains what data the TrigVPN apps for iOS and Android ("TrigVPN", "we") process, and why. TrigVPN is run by Christian Calderon (publisher name "Calships"), San Juan, Puerto Rico, USA, who is the data controller. Contact: privacy@trigvpn.com.
Summary
- No account. We never ask for your name, email address or phone number.
- We do not log or store the websites you visit, your DNS queries, your traffic contents or the addresses you connect to.
- We keep only what the service needs to run: a random device key, your session expiry, your service tier, and short-lived records for ad rewards and subscription checks. All of it is listed below.
- Free sessions show ads from Google AdMob and its partner ad networks. Ads may be personalized using your device's advertising ID if you allow it; see "Ads".
- We do not sell your data, and we never combine ad data with your VPN activity, which we don't log.
How the VPN works
When you connect, the app makes a WireGuard key pair on your device. The private key never leaves your device. The app sends the public key, your platform (iOS or Android), the server region you picked, and, if you subscribe, your store receipt to our API at api.trigvpn.com. The API assigns you an exit server and private tunnel addresses for a limited session. Your traffic then flows, encrypted, from your device to that exit server and on to the internet.
Data on our API (Cloudflare)
Our API runs on Cloudflare Workers. It stores:
- Session record, keyed by your WireGuard public key: the session expiry time and which exit server holds it. It is used to add time to your session when you watch a rewarded ad.
- Subscription check result, keyed by a one-way SHA-256 hash of your store receipt (not the receipt itself): your tier (free or VIP) and the subscription expiry. It is kept until the subscription expires so we don't have to ask Apple or Google on every connection.
- Rewarded-ad transaction IDs: when you finish a rewarded ad, Google tells our API, with a transaction ID and your public key. We keep the transaction ID for 7 days so a reward can't be claimed twice.
- Daily free-time record, keyed by a random ID the app creates on install (not an advertising ID): today's used free minutes, rewarded ads watched today, and the open session. It enforces the 5 free minutes a day and the 6-ads-a-day limit, and expires after 3 days.
- Server records: load and status of our exit servers. These contain no user data.
Our API code does not log client IP addresses. Cloudflare, as our host, handles the network connection and may process your IP address and request metadata for security and operations under its own privacy policy.
Data on exit servers
Exit servers run in Hetzner data centers in the EU. For each active session an exit server keeps your public key, tier, tunnel address and session expiry, and saves these to disk so a session survives a server restart. The lease is removed when the session expires.
While you are connected, the WireGuard software holds your current IP address and port in memory so it can send traffic back to you, along with byte counters for the connection. These are not written to disk or logs. Servers count total outbound traffic per month for the whole server (for hosting bills), not per user.
Exit servers run their own DNS resolver with query logging turned off. We do not inspect, log or store the sites you visit, your DNS queries, your traffic contents or your destination addresses.
Ads
Free sessions are supported by Google AdMob ads. Ads load over your normal connection before the VPN starts, not through the tunnel.
Ads are served through Google AdMob, which runs an auction among Google and these partner ad networks: Unity Ads, Liftoff (Vungle), Mintegral, Moloco, InMobi and DT Exchange (Digital Turbine). The winning network delivers the ad.
Personalized ads. On iOS, the app asks for App Tracking Transparency permission. If you allow it, ad networks may use your device's advertising identifier (IDFA) to show more relevant ads; if you decline, the identifier is not shared and ads are not personalized with it. On Android, ad networks may read the device advertising ID; you can reset or delete it, or opt out of personalized ads, in Android settings. We use advertising data only to show and measure ads in TrigVPN. We do not sell it and do not link it to your VPN sessions.
Google and the partner networks receive data they need to deliver and measure ads and to prevent fraud, such as your IP address, device type, operating system, app version, ad interactions and diagnostic data such as crash and performance reports from their ad software, and may use identifiers for frequency capping and reporting. Each network processes this data under its own privacy policy linked above. See how Google uses data from apps that use its services.
Consent. In the European Economic Area, the UK and Switzerland, the app asks for your consent through Google's consent form before any ad is requested; that consent covers Google and the partner ad networks listed above. Elsewhere no form is shown. Where the form applies, you can change your choice at any time with "Privacy choices" in the app.
If you subscribe to VIP, no ads are shown.
Subscriptions
VIP is sold through the Apple App Store or Google Play. Apple or Google handles payment; we never see your card details or your name. To confirm your subscription, the app sends your store receipt (iOS) or purchase token (Android) to our API, which checks it with Apple or Google. We store only the result described above. Manage or cancel your subscription in your App Store or Google Play account settings.
Legal bases (EEA/UK)
We process the data above to provide the service you asked for (contract) and to prevent abuse and fraud (legitimate interests). For ads in the EEA, UK and Switzerland, we rely on your consent.
Sharing
We share data only with the providers that run the service: Cloudflare (API hosting), Hetzner (exit servers), Google (AdMob ads, Google Play subscriptions), Apple (App Store subscriptions), and the partner ad networks listed under "Ads", which receive device and ad data to show and measure ads. We may disclose data if the law requires it, but we can only hand over what we have, as listed in this policy. We do not sell data.
International transfers
Our providers process data in the USA, the EU and elsewhere. Where required, transfers rely on the providers' standard contractual clauses or other lawful mechanisms.
Retention
- Exit-server lease: until your session expires.
- Session record on our API: an expiry time and server name, no longer used once the session expires.
- Subscription check result: until the subscription expires.
- Daily free-time record: 3 days.
- Rewarded-ad transaction IDs: 7 days.
- Emails you send us: as long as needed to answer you.
Your rights
Depending on where you live, you may have the right to access, correct or delete your data, to object to its processing, and to complain to a data protection authority. Because TrigVPN has no accounts, we usually can't link stored data to you. Write to privacy@trigvpn.com and we will help as far as we can. Deleting the app removes everything it stored on your device.
Children
TrigVPN is not directed at children under 13, and we do not knowingly collect their data.
Changes
We will post changes on this page and update the date above.