Privacy Policy — Pump VPN
Effective date: 2026-10-08
Contact: igorvorogushin1@gmail.com
Public URL: https://pumpvpn.online/privacy
Pump VPN ("the app", "we") is a network client for the VLESS protocol (and VMess, Trojan, Shadowsocks). We respect your privacy. This document explains what data the app processes and how.
Summary
- There are no accounts and no registration. You supply your own server configuration (key).
- We do not collect, store or transmit your traffic, browsing history or personal data to any server operated by the developer.
- Everything the app creates (server configs, statistics, logs, settings) is stored locally on your device.
- The website pumpvpn.online counts visits anonymously, without cookies (see "Website statistics"). The app itself has no analytics.
What data the app processes
Stored locally on your device (not sent to us)
- Server configurations. They contain connection credentials. When a PIN is set, they are encrypted (AES-GCM; the key is derived from the PIN via PBKDF2 with a salt; the PIN itself is never stored). This data never leaves the device.
- Per-server traffic statistics (bytes downloaded/uploaded).
- Connection log (start/stop/error events).
- App settings (language, theme, DNS, split tunneling, etc.).
This data is excluded from Android cloud backup and from device-to-device transfer.
Outbound network requests
- Server geolocation and latency. To show a country flag and ping, the app queries the third-party service ip-api.com, sending it the IP address of your server. See ip-api.com's own policy. No personal user data is sent.
- Connection traffic. It goes through the server that you configured yourself. The developer does not operate that server and does not log or inspect your traffic.
Permissions and why they are used
- VPN (VpnService) — creates the network tunnel (core function).
- Camera — scanning a server key from a QR code. Images are not saved or transmitted anywhere.
- Notifications (POST_NOTIFICATIONS) — showing connection status.
- Foreground service — keeping the tunnel running in the background.
- Ignore battery optimizations (REQUEST_IGNORE_BATTERY_OPTIMIZATIONS) — with your consent, for reliable background auto-reconnect.
Website statistics
The website pumpvpn.online (not the app) counts visits with Umami, a statistics tool we host ourselves on our own server at stats.pumpvpn.online. No data is sent to third parties.
- What is recorded: the page visited, the referring website, the country and region, browser, operating system and device type, language, and clicks on the download, Google Play, "Get key", "Copy key", language and screenshot buttons.
- What is not recorded: no cookies are set and no identifier is stored in your browser. Your IP address is not saved: it is used only at the moment of the visit to determine the country and region. City, screen size and the query part of addresses are discarded before anything is stored.
- Purpose and legal basis: understanding how many people visit the site and which downloads they use, to improve it (our legitimate interest).
- Retention: the data does not identify anyone, so it is kept without a time limit.
- Opting out: open pumpvpn.online/?notrack and your browser will no longer be counted; pumpvpn.online/?track undoes this. A content blocker may also block the counter.
Sharing with third parties
We do not sell or share your data with third parties. The app contains
no ads, no analytics and no trackers. The only outbound call is to ip-api.com for geolocation/latency (see above). Website statistics are processed only on our own server (see "Website statistics").
Children
The app is not directed at children and does not knowingly collect data about children.
Data deletion
All data is stored on your device. You can erase it in the app ("Erase all data" / three wrong PIN attempts) or by uninstalling the app.
Changes
We may update this policy. The current version is always available at the public URL above, with an updated effective date.
Contact
For privacy questions: igorvorogushin1@gmail.com