Zystra VPN

Privacy Policy

Effective date: 22 September 2026 · Last updated: 07 October 2026

Short version: Zystra VPN does not collect, log, or sell your personal data or your browsing activity. There are no accounts and no analytics. Your VPN keys and settings stay on your device.

1. Introduction

This Privacy Policy explains how Zystra VPN ("we", "us", "our") handles information when you use the Zystra VPN mobile application (the "App"). The App and the Zystra VPN service are owned, operated, and published by Across Cloud LLC. The App is developed and maintained by codex-zubair (codexzubair.com) on behalf of Across Cloud LLC. By installing or using the App, you agree to this policy.

2. Who We Are

Zystra VPN is a product of Across Cloud LLC. Across Cloud LLC owns and operates the Zystra VPN service and publishes the App. The App is developed by codex-zubair (codexzubair.com) on behalf of Across Cloud LLC.

For any privacy-related question or request, contact us at iam.nmzar@gmail.com.

3. Information We Collect

We do not collect personal information. Specifically:

We do not require or offer accounts, sign-ups, or logins.
We do not log your browsing history, the websites or services you visit, DNS queries, or the content of your traffic.
We do not collect your name, email address, phone number, contacts, location, or advertising identifiers.
We do not include third-party analytics, advertising, or tracking SDKs in the App.
We do not sell, rent, or share your data with third parties for marketing.

VPN device key (technical data). To give each install its own private tunnel, the App generates a WireGuard key pair on your device. Only the public key is sent to our VPN server when you connect, so the server can authorise your tunnel. The private key never leaves your device and is never sent to us. This public key is a random device-generated value: it is not linked to your name, email, or any account (we have none), and it is not used to track your browsing. It is stored on the server only to keep your tunnel working and is removed when it is no longer needed.

Because we do not collect personal information, we cannot and do not disclose it to anyone.

4. VPN Service and VpnService Disclosure

The App uses the Android VpnService API to create an encrypted tunnel (WireGuard) between your device and the VPN server you select. All traffic routed through the tunnel is encrypted in transit.

Operating a VPN necessarily means your traffic passes through our servers in order to reach the internet. We do not monitor, record, or store that traffic, and we do not keep connection logs tied to your identity. No persistent activity logs are retained.

5. Information Stored on Your Device

The App stores a small amount of data locally on your device only. This data never leaves your device and is not sent to us:

VPN credentials (WireGuard private key) are generated on your device and stored in your device's secure storage (Android Keystore-backed storage). The private key is never transmitted. The server-assigned tunnel address is also stored locally.
App settings (for example: selected server, auto-connect, onboarding/privacy acceptance) are stored locally using shared_preferences.

You can remove all locally stored data at any time by clearing the App's data in Android Settings, or by uninstalling the App.

6. Third Parties

We do not sell or share personal data. To operate the service we rely on hosting providers for our VPN servers and for this website. These providers may process technical data (such as network connection metadata) as necessary to deliver the service, under their own policies. We do not receive your browsing activity from them.

7. Security

We use industry-standard encryption (WireGuard) for tunneled traffic and keep our servers updated and access-restricted (key-based SSH, firewall rules). No method of transmission or storage is 100% secure, but we design the App to minimize the data that exists in the first place.

8. Your Rights

Depending on where you live, you may have rights to access, correct, or delete personal data, and to object to processing. Because the App does not collect personal data or create accounts, there is generally nothing for us to retrieve, correct, or delete on our side. You can always delete locally stored data by clearing App data or uninstalling the App.

This policy is governed by the laws of Bangladesh. Users in other jurisdictions (including the European Economic Area) retain the protections afforded by their local laws. To exercise any right or ask a question, email us at iam.nmzar@gmail.com.

9. Children

The App is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has used the App, contact us and we will help you remove any local data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you within the App. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions, requests, or concerns? Email iam.nmzar@gmail.com.