MeowVPN Privacy Policy
Effective Date: August 16, 2026 Last Updated: August 16, 2026
MeowVPN (“we”, “our”, “us”) provides a VPN proxy service via a browser extension (Chrome, Firefox, Edge) and mobile apps (Android, iOS). This policy explains what data we collect, why, and how long we keep it.
1. Our core commitment
MeowVPN does not monitor, log, or store the websites or destinations you visit while connected, your browsing history, or the content of your traffic. We are not able to see this information because our servers do not record it.
2. Data we do collect
Device ID. When you install the extension or app, a random identifier is generated on your device (not derived from any personal information) and sent to our servers to associate your device with a VPN session. This ID is stored locally on your device.
Device signing secret. A unique cryptographic secret is issued to your device and used to sign requests to our servers (via HMAC-SHA256), so requests claiming to be from your device can be verified as authentic. This secret never leaves your device except during initial registration, is stored in encrypted form on our servers, and – on the mobile app – is stored in your device’s secure OS keychain (Android Keystore / iOS Keychain).
IP address and last-active timestamp. Each time your device authenticates with our servers, we record the IP address it connected from and the time of that request. This is used exclusively for:
- Verifying your device’s signed requests are recent (replay-attack prevention)
- Limiting how many devices can be active from the same IP at once (abuse prevention)
- Detecting and troubleshooting service issues
We do not use this IP address to build a profile of your activity, and it is separate from the destination websites you visit — we simply don’t record those at all.
IP-based country detection (browser extension and mobile app). To show you your approximate location or suggest a nearby server, your IP address is forwarded, server-side, to a third-party geolocation provider (ipgeolocation.io). We do not store the result associated with your identity beyond returning it to your app in that moment.
VPN/proxy detection check. A status-check feature forwards your IP address to a third-party service (iphub.info) to determine whether the network you’re on is already flagged as a VPN or proxy. This is used only to inform the status shown in the app and is not stored.
Advertising (mobile app, free tier only). We use ironSource for ad mediation in the free version of the mobile app. ironSource may collect device type, OS version, coarse (country-level) location, and ad engagement data, governed by ironSource’s privacy policy.
3. What we never send to our servers
- The websites, domains, or IP addresses you visit while connected to the VPN
- The content of your traffic
- Your real identity, name, or email (there is no account system for VPN usage – only anonymous device IDs)
4. Admin/staff accounts
A small number of staff accounts exist solely to manage our server infrastructure (e.g., adding VPN server locations). These are not customer accounts, are not self-registrable, and store only a name, email, and password hash for authorized personnel.
5. Data retention
We currently retain device IP/timestamp records after last activity.
6. Security
Requests between your device and our servers are authenticated using per-device cryptographic signatures
7. Children’s privacy
MeowVPN is not directed at, and does not knowingly collect information from, children under 13 (or the relevant minimum age in your jurisdiction).
8. Your rights
Since there is no customer account system, you can remove all locally stored data (device ID, secret, preferences) simply by uninstalling the extension or app. To request deletion of server-side records tied to a specific device ID, contact us at [email protected].
9. Changes to this policy
We’ll update the “Last Updated” date above whenever this policy changes.
