Legal Privacy
Privacy Policy.
Written to be read. The short version: we can't tell anyone what you did online, because we don't know — and we never sell or share personal data with anyone.
Effective: July 1, 2026
1 — We never log the websites you visit, the apps you use, your DNS queries, or the content of your traffic.
2 — We never sell, rent, trade, or disclose personal data to third parties, for any purpose.
3 — We keep the minimum needed to run a paid service: an anonymous device ID, plan status, billing records, and coarse usage totals.
4 — You can see or erase everything we hold about you by emailing support@loopholevpn.com.
1. Who we are
"Loophole VPN", "we", "us" — TwistedFN Solutions LLC, a limited liability company registered in Wyoming, United States, and the operator of the Loophole VPN applications and of this website, loopholevpn.com. For anything in this policy, contact support@loopholevpn.com.
This policy covers the Loophole VPN apps (Android today; iOS when released) and this website.
2. What we never collect
When you use Loophole VPN, your traffic is encrypted between your device and our servers. We do not record, store, or analyze:
- the websites you visit or the apps and services you use;
- the destination of your connections (IP addresses or domains);
- your DNS queries;
- the content of anything you send or receive;
- your precise location (we never access GPS).
This is a design decision, not just a promise: our servers are configured without traffic or request logging, so this history does not exist to be handed over, leaked, or sold.
3. What we do collect, and why
a. Service data (to make the app work)
- A random device identifier and a device fingerprint (a one-way hash). This is your "account": it's how a server knows your device has an active plan. It contains no name, email, or phone number.
- Plan and trial status. Which plan is active on the device and until when.
- Device model, OS version, and app version. Sent with support diagnostics and update checks so we ship fixes that work on your phone.
b. Optional linked identity (only if you add it)
- If you choose to link an email address or Telegram account (for moving your plan to a new phone), we store that identifier and its link to your device account. Linking is optional; the app works fully without it. Unlink at any time in Settings.
c. Billing data (to sell you a plan)
- Crypto payments: invoice ID, amount, and payment status, processed by our payment processor. Blockchain transactions are public by nature; we never receive or store bank or card details — none are involved.
- Redeem codes: which code was activated, when, and on which device account.
- App Store purchases (future iOS app): handled entirely by Apple; we receive a receipt confirming the purchase, never your payment details.
d. Operational data (to keep the service fast and fair)
- Coarse usage totals per device account — e.g. total bytes over a period and connection counts — used for capacity planning, enforcing plan device limits, and stopping abuse. These totals are not linked to any browsing destination.
- Approximate region (country level, derived from the network you connect from) — used to route you to the fastest server that works there. We do not build location histories.
- Diagnostics you choose to send. "Test all routes" results are uploaded only when you run it, and contain route names, timings, and error codes — not your browsing.
e. This website
- No cookies, no analytics, no trackers, no embedded third-party content. Our web server keeps standard, short-lived technical logs (IP address, requested page, time) for security and abuse prevention, deleted on rotation.
4. What we will never do with your data
We do not sell, rent, trade, or otherwise disclose personal data to third parties — not to advertisers, not to data brokers, not to "analytics partners" — for any purpose. We do not use VPN traffic data for advertising or profiling of any kind. This commitment applies to every version of our apps, on every platform.
The only third parties that touch any data are the processors we need to operate: our hosting providers (who run servers, configured without activity logging) and our crypto payment processor (who sees the payment, not your traffic). Each receives only what its role requires.
5. Legal requests
If we receive a legally binding demand, we can only hand over what exists — see sections 2 and 3. We do not possess browsing histories, connection destinations, or traffic content for any user, so we cannot produce them. We will challenge overbroad or improper requests.
6. How long we keep things
| Data | Kept for |
|---|---|
| Device account & plan status | While your plan or trial is active, then deleted on cleanup after prolonged inactivity |
| Linked email / Telegram | Until you unlink it or delete your data |
| Billing records (invoices, code redemptions) | As long as needed for accounting and fraud prevention |
| Usage totals | Rolling window needed for capacity and abuse control |
| Diagnostics you send | Until reviewed and resolved, then deleted |
| Website server logs | Short rotation, days not months |
7. Security
All traffic between your device and our servers is encrypted with modern protocols. Access credentials rotate automatically. Our servers are hardened, kept minimal, and spread across independent providers; access to them is restricted to key-based authentication. No system is perfect — which is exactly why we keep so little.
8. Your rights & deleting your data
You can ask us at any time to show you, correct, or erase the data we hold about you. Depending on where you live (e.g. the EU/EEA under GDPR, California under CCPA), these rights are also guaranteed by law — we honor them for everyone regardless.
- In the app: Settings → Unlink removes a linked email/Telegram immediately.
- By email: support@loopholevpn.com, subject "Delete my data". We respond within 30 days. Erasing your device account also ends any active plan.
9. Children
Loophole VPN is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
10. International transfers
Our servers are located in several countries (currently in Europe). Whatever minimal data we hold is protected by this policy wherever it is processed.
11. Changes to this policy
If we change this policy, we'll update the date at the top and, for meaningful changes, say so in the app. We will never weaken the core commitments in sections 2 and 4.
12. Contact
Privacy questions, requests, or complaints: support@loopholevpn.com. We read everything, in English and Farsi.
Postal: TwistedFN Solutions LLC, 15442 Ventura Blvd., Ste 201-308, Sherman Oaks, CA 91403, United States.