NebulaVPN Privacy Policy
At NebulaVPN (irnebula.com), your digital privacy, anonymity, and security are fundamental principles. This policy explains our operational practices, strict zero-logs commitment, and compliance with Google Play Developer Policies and GDPR.
Zero Traffic Logging
We never monitor, record, store, or share your browsing history, destination URLs, payload contents, or DNS requests.
WireGuard Encryption
High-grade ChaCha20-Poly1305 and Curve25519 cryptography encrypting all communication between your device and the server.
Full GDPR Compliance
Explicit user consent, complete data minimization, right to erasure, and user sovereignty over connection preferences.
Google Play Prominent Disclosure: VpnService Usage
In compliance with Google Play Developer Program Policies, this section provides explicit disclosure regarding the use of Android's android.net.VpnService API in NebulaVPN (package: com.nebulavpn.iranip):
-
Core Functionality: NebulaVPN is a specialized Virtual Private Network utility. It utilizes Android's
VpnServiceas its core mechanism to establish an encrypted, device-level network tunnel using modern WireGuard protocols. - Data Encryption: All IP packets originating from or destined for your device are encrypted in transit. This shields user communication against interception, packet inspection, and man-in-the-middle attacks on untrusted or public networks (such as public Wi-Fi).
- No Traffic Interception or Sale: NebulaVPN does not decrypt, harvest, analyze, monetize, or sell any user data passing through the VpnService tunnel.
- User Initiation & Control: The VPN tunnel is established only when the user explicitly taps the "Connect" button in the application interface and confirms the standard Android OS VPN Connection Request prompt. The user may terminate the tunnel at any moment with a single tap.
Information We NEVER Collect (Strict Zero-Logs Policy)
We operate under an uncompromising zero-logs architecture. We do not store, inspect, or retain:
Minimal Data Processed For Service Delivery
To establish cryptographic handshakes and enforce subscription data quotas, only the following non-identifiable technical data is processed:
- WireGuard Public Key: Generated cryptographically on the device to authenticate the peer session.
- Data Transferred (Bytes Counter): Cumulative upload and download byte counters solely to monitor subscription usage and quota renewal.
- Push Notification Token (Optional): A pseudonymous Firebase Cloud Messaging (FCM) token if you opt-in to system status or expiration notices.
Third-Party Services & Advertising (Google AdMob)
To provide free access tiers, the application integrates third-party SDKs that adhere to strict privacy standards:
- Google AdMob: For users accessing free servers, rewarded video ads are presented to grant connection credits. In the European Economic Area (EEA) and United Kingdom, non-personalized advertising is served unless explicit consent is provided via the standard Google User Messaging Platform (UMP) consent dialog.
- Google Play In-App Billing: Purchases for premium subscriptions are securely handled by Google Play Billing API. NebulaVPN never has access to your credit card or financial information.
Your Rights Under GDPR (EU / EEA Users)
If you are an individual residing in the European Union or European Economic Area, you enjoy full rights under the General Data Protection Regulation (GDPR):
- Right of Access & Rectification: You may inquire about your technical account status at any time.
- Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your peer configuration and data records by contacting support.
- Right to Withdraw Consent: You may withdraw your consent for notification or ad personalization at any time from your device settings.
Children's Privacy (COPPA Compliance)
NebulaVPN is not directed to individuals under the age of 13 (or under 16 in certain EU member states). We do not knowingly solicit or collect personal information from children.
Contact & Data Protection Inquiries
For questions, privacy requests, or security disclosures, reach out directly through our verified official channels: