MarkVPN — Privacy Policy
Last updated: 25 September 2026
MarkVPN (“the App”) is operated by MarkMint Tech (“we”, “our”, “us”). This policy explains exactly what the App collects, who receives it, and why. It describes the App as it is actually built — every item below corresponds to something the App really does.
1. We do not have user accounts
MarkVPN has no sign-up, no login, and no passwords. We never ask for your name, email address, or any other identifying detail in order to use the VPN.
To provision your VPN connection and to check whether a subscription is active, the App generates a random identifier the first time it runs. It is created on your device, is not derived from any hardware or account detail, cannot be linked to you personally, and is erased when you uninstall the App.
2. What we collect
2.1 Provided by you
- Support messages — only if you contact us. We receive whatever you write, plus any contact detail you give us so we can reply.
2.2 Collected automatically
Connection data (sent to our servers at markminttech.com)
- The random device identifier described above
- The VPN server you selected
- Connection and disconnection times, and session duration
- Whether the device has an active subscription
Your IP address (sent to a third party)
When a VPN session starts, the App looks up the public IP address your device is presenting, so it can be shown to you on the Home screen. This lookup is performed by ipify (api.ipify.org), an independent service that necessarily receives your IP address in order to answer. We do not store the result on our servers; it is held in the App only while the session lasts. ipify's own privacy policy governs what they do with it.
Usage analytics — Google Firebase Analytics
- VPN connect and disconnect events, including the server name, session duration, and whether the device is premium
- Onboarding completion
- Paywall views and subscription purchases
- Whether an ad was shown after a successful connect
- Standard information Firebase gathers on its own: device model, operating system version, app version, coarse country-level location, and a Firebase installation identifier
Push notifications — Google Firebase Cloud Messaging
The App registers a messaging token with Google so we can send service announcements, and subscribes it to a single broadcast topic. The token identifies the installation, not you.
Advertising
Free users are shown ads. Ad networks collect data under their own policies:
- Google AdMob — advertising identifier (GAID on Android, IDFA on iOS), device information, coarse location, ad interaction data
- Meta Audience Network (Android) — the same categories, under Meta's own policy
Ads are configured as not directed to children, and MarkVPN is not intended for children (see section 7).
2.3 Purchases
Subscriptions are processed entirely by Google Play or the Apple App Store. We never see or store your card number, billing address, or any payment credential. We receive only the purchase receipt, which we check against the store to confirm the subscription is genuine and still active.
2.4 Stored only on your device, never sent to us
- Your selected server and app preferences
- The VPN configuration issued for your device
- On Android, the list of apps you chose to exclude from the tunnel (split tunnelling)
These are removed when you uninstall the App.
3. What we do NOT collect
We do not log, monitor, store, or share:
- The websites, apps, or services you reach through the VPN
- The content of anything you send or receive through the tunnel
- Your DNS queries made through the tunnel
- Any browsing history, and no record tying your IP address to any activity
Our VPN servers necessarily handle your traffic in order to carry it, and the underlying protocol keeps, in memory, the address your device is connecting from and the time of the most recent handshake — this is how a VPN works and cannot be avoided. That information is not written to disk, not retained after the session ends, and never combined with anything about what you did.
4. Who receives your data
| Recipient | Why | What they receive |
|---|---|---|
| MarkMint Tech (markminttech.com) | Issue VPN configuration, verify subscriptions | Random device id, chosen server, session times, subscription state |
| ipify (api.ipify.org) | Look up the IP shown on the Home screen | Your public IP address |
| Google Firebase Analytics | Understand how the App is used | Usage events, device model, OS, app version, country |
| Google Firebase Cloud Messaging | Deliver announcements | Messaging token |
| Google AdMob | Show ads to free users | Advertising id, device info, coarse location |
| Meta Audience Network (Android) | Show ads to free users | Advertising id, device info |
| Google Play / Apple App Store | Process subscriptions | Purchase receipt |
We do not sell, rent, or trade your data. We disclose data to authorities only where a valid legal order compels us, and only the minimum required — in practice we hold nothing that identifies you or reveals your activity.
5. How long we keep it
| Data | Retained |
|---|---|
| Device id and connection metadata | Up to 90 days, for abuse prevention |
| Firebase analytics events | Up to 14 months (Google's default) |
| Subscription records | For the subscription, plus 12 months for accounting |
| Data on your device | Until you uninstall or clear the App |
| Support messages | Up to 24 months |
6. Security
- All communication between the App and our servers uses TLS
- The App pins our TLS certificate, so a third party cannot intercept it
- VPN traffic is encrypted using AmneziaWG, an obfuscated variant of the WireGuard protocol
- We hold no passwords, because the App has no accounts
No system is perfectly secure, and we cannot guarantee absolute security. We do not claim to.
7. Children
MarkVPN is not intended for children under 13 (or the equivalent minimum age where you live), and we do not knowingly collect data from them. Ad requests are marked as not child-directed. If you believe a child has used the App and provided us data, contact us and we will delete it.
8. Your rights
Depending on where you live — including the EEA and UK under GDPR, and California under the CCPA — you may have the right to access, correct, delete, or export your data, to object to or restrict processing, and not to be discriminated against for exercising these rights.
Because the App has no account, most data is either on your device or tied only to a random identifier. In practice:
- To delete everything held on your device: uninstall the App
- To delete what our servers hold: contact us with your request. If you can still open the App, include the device identifier shown in Settings
- To stop personalised ads: use your device's advertising settings, or respond to the in-app consent prompt where it appears
- To stop analytics and notifications: turn off notifications in your device settings and uninstall to end analytics collection
We respond to requests within 30 days.
9. International transfers
Our VPN servers and service providers are located in several countries, so your data may be processed outside your own. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
10. Changes
We may update this policy. The date at the top changes when we do, and material changes will be announced in the App. Continuing to use the App after a change means you accept the updated policy.
11. Contact
MarkMint Tech
Email: modassirhabib9@gmail.com
If you are in the EEA or UK and are unhappy with our response, you may lodge a complaint with your local data protection authority.
See also our Terms of Use.