Privacy Policy

GloNet VPN (“GloNet”, “we”, “us”) is a VPN service for Android. In this policy, these terms refer to the operator of the service, GloNet VPN. This policy explains what information is processed when you use the GloNet VPN Android app (package com.app.gracevpn), our API (api.glonetvpn.app), our VPN servers, and this website (glonetvpn.app).

For any privacy question or request, contact us at support@glonetvpn.app. This mailbox is monitored and is our contact point for privacy matters.

The app was previously published under the names “Glonet VPN” and “Grace VPN”. This policy replaces any earlier privacy policy for the app. It does not replace the explanation and consent request the app shows before it starts the VPN, or Android’s own VPN connection request.

GloNet uses Android’s VPN service (VpnService) as its core feature. When you tap Connect, Android asks for your permission to let GloNet create a VPN connection. Once allowed, the app sends your device’s internet traffic through an encrypted tunnel (VLESS with REALITY, which is based on TLS 1.3) to the GloNet server you selected. Our current server is located in Ashburn, Virginia, United States. GloNet uses the VPN service to route your traffic through that server; it does not use it for advertising or to build a profile of you.

Information processed to route your traffic

While you are connected, the VPN server necessarily processes technical network information in real time to route your traffic: your device’s public IP address, the network destinations you connect to (such as the addresses of websites and services), and the amount of data transferred. The content of encrypted connections you make to websites (for example, HTTPS pages) remains encrypted between your device and that website.

VPN access logging is turned off

Our VPN server runs Xray with access logging disabled. This means the VPN server does not keep an access log of the connections you make or the destinations you visit. We do not intentionally store your browsing history or the content of your traffic.

Like any server, the VPN server still writes limited operational and security logs, described in section 4. We do not use VPN traffic for advertising or profiling, and we do not sell it.

What a VPN does and doesn’t do

A VPN changes the IP address that websites see and protects your traffic on the network between you and our server. It does not make you anonymous: websites can still identify you if you sign in, and they may use cookies or other techniques.

Our API server and our VPN server keep operational and security logs so that we can run the service, diagnose faults and protect it against abuse. Depending on the event, a log entry may include limited technical metadata such as:

• an IP address;
• the request endpoint (for example, the address of the location list);
• the date and time;
• the HTTP status of a request;
• error information;
• service and runtime diagnostic data.

Operational logs are configured to be retained for no longer than 7 days. Entries may be removed sooner, for example when the logs reach their configured storage limit. We use these logs only to operate, troubleshoot and secure the service, not to build a record of your browsing, and access to them is restricted to the people who run the servers.

The app stores the following locally on your device. It is not sent to us:

• the location you selected and its connection settings;
• the connection status, session duration, current speed and data-usage counters shown in the app;
• app settings such as your language preference.

You can remove this information at any time by clearing the app’s storage in Android settings or uninstalling the app.

The app contacts our API (api.glonetvpn.app) to download the list of available locations and the app’s configuration. Like any web service, our server receives technical information with each request: your IP address, the date and time, the address requested, and the app’s network client identifier.

The current version does not send an account, email address, Android ID or other hardware identifier with these requests. We use this information to deliver the service, keep it secure and diagnose problems. It may appear in the operational logs described in section 4.

The app uses Google Firebase Analytics to understand how the app is used — for example, when the app is opened and which screens are viewed. Firebase may collect information such as your device model, Android version, app version, approximate location derived from your IP address, an app-instance identifier, and, where your device settings allow it, your Android advertising ID.

The app does not include a separate crash-reporting service. Diagnosing problems relies on these usage statistics, the operational logs described above, and the details you choose to send us when you contact support.

This information is processed by Google under its own terms. Learn more in How Google uses information from apps that use its services.

The app itself does not create a user profile or send a device identifier to our servers. Identifiers are handled as follows:

• App-instance identifier — created by Firebase Analytics for this installation of the app. It resets if you clear the app’s data or reinstall the app.
• Android advertising ID — the app declares the advertising-ID permission because of the Google SDKs it includes. Google’s SDKs may read it where your device settings allow. You can reset or delete it in Android settings (Settings → Privacy → Ads, or Settings → Google → Ads, depending on your device).
• Install referrer — Google’s SDKs may read how the app was installed (for example, from Google Play) for attribution statistics.

The app includes the Google Mobile Ads SDK (AdMob). Ads are currently turned off, and the app does not show any advertisements. The SDK is still initialized when the app starts and may communicate with Google and process device information and identifiers (including the advertising ID, where allowed) under Google’s policies.

If we decide to show ads in the future, we will update this policy before doing so and describe what changes.

The app includes Google Play Billing so that optional subscriptions can be offered in the future. Subscriptions are currently unavailable and nothing is sold in the app.

If subscriptions are introduced, payments will be processed by Google Play. We would receive information needed to confirm and manage your subscription (such as the product purchased and purchase status), but never your full payment card details. We will update this policy before subscriptions become available.

The current version of GloNet does not offer accounts, and does not ask for your name, email address, password or phone number. We do not hold account information from earlier versions of the app. If accounts are introduced in the future, we will update this policy first.

Speed test

The speed test measures your connection by exchanging data with third-party test servers (including Netflix’s fast.com service). Those servers see the IP address of your connection — the GloNet server’s address when you’re connected, or your own when you’re not — and process it under their own policies. We do not receive or store your test results.

Private browser

The built-in browser opens websites in incognito tabs with caching turned off. Websites you visit receive your requests directly (through the VPN when you’re connected), and searches you type are sent to Google Search. We do not receive your browsing history from the browser.

• VPN connection — required to create the VPN. Android asks you before GloNet can connect.
• Notifications (Android 13 and later) — used to show the ongoing VPN status notification.
• Internet and network state — to connect and to detect network changes.
• Advertising ID and install-referrer access — declared by the Google SDKs described above.

This website does not use cookies, analytics or advertising trackers, and its fonts are served from our own domain. Our hosting provider (Vercel) processes standard request logs — such as your IP address, browser type, and the pages requested — to deliver and protect the website, and keeps them under its own retention practices.

The website does not connect to our VPN service and never contains your VPN connection details.

If you email us at support@glonetvpn.app, we receive your email address and anything you include in your message. We use it only to respond to you and to improve our support, and keep it for as long as needed to handle your request and any follow-up. Your email is handled by our email provider on our behalf.

We do not sell personal information. Information is shared only:

• with service providers that run parts of the service for us — server hosting, website hosting (Vercel), email, and Google’s services described above;
• when required by law, such as a valid legal order, and only to the extent required;
• to protect the security of the service or the rights and safety of users and others;
• as part of a business transfer, such as a merger or acquisition, subject to this policy.

If we receive a legal request, we can only provide information that actually exists at that time. The VPN server does not keep an access log of the sites users visit, and operational log entries are kept for no longer than 7 days.

We use encryption in transit (TLS for our API and website, and the encrypted VPN tunnel for your traffic), restrict access to our servers, keep service credentials separate from the public website, and limit how long operational logs are kept. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

• VPN traffic: processed in real time to route it; the VPN server does not keep an access log of your connections.
• Operational and security logs (API server and VPN server): Operational logs are configured to be retained for no longer than 7 days. They are deleted automatically after that period.
• On your device: until you clear the app’s data or uninstall the app.
• Google services (Firebase Analytics, Google Mobile Ads, Google Play): according to Google’s settings and policies.
• Support emails: as long as needed to handle your request and any follow-up, then deleted.

To ask us to delete information, email support@glonetvpn.app. See section 20 for what we can do.

Our VPN server is located in the United States, and our service providers, including Google, may process information in other countries. Where required, we rely on appropriate safeguards for these transfers.

Depending on where you live (for example, Canada, the European Economic Area, the United Kingdom, or California), you may have the right to access, correct or delete personal information we hold about you, to object to or restrict certain processing, and to complain to a data-protection authority.

To make a request or ask a question, email support@glonetvpn.app. Because the app has no accounts and our logs are short-lived, we usually can’t link information to you personally; we’ll explain what we hold and delete what we can, including any support emails from you. You can also:

• disconnect the VPN or revoke its permission at any time in Android settings;
• reset or delete your advertising ID in Android settings;
• clear the app’s data or uninstall the app, which also resets the Firebase app-instance identifier.

GloNet is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

We will update this policy when the app or service changes — for example, before enabling ads, accounts or subscriptions, or if our logging or retention changes. The “Last updated” date at the top shows when it last changed. For significant changes, we will give notice in the app or on this website.

Questions about this policy, privacy requests or deletion requests: support@glonetvpn.app.