Privacy Policy
Last updated: 20 September 2026
This page says what leaves your device and what does not. No “we care about your privacy” — just the list.
The app is not in Google Play yet. This page describes how the first version will work. If anything changes before launch, we will update the text and the date.
In short
- We keep no log of the sites you open, your DNS queries, or the contents of your traffic.
- There is no account: we never ask for or store an email, phone number or password.
- We do not claim the app collects nothing. It is an ad-supported app, and ad networks receive your device advertising ID.
- Everything that does leave the device is listed below, item by item.
Who processes the data
The operator is the developer of the Liska VPN app. The full legal name, address and contact email will appear here and in the site footer before the app is published on Google Play. Until then the app is not distributed and no app user data exists.
The website, however, is already running, and it has to be counted separately: see “This website’s data” below.
This website’s data
The site is static: no executable JavaScript, no analytics, no ads, no forms, no cookies. There is nothing on the page that could tie a visit to you personally. The one script tag on the page is a data block for search engines; the browser does not execute it.
But every web server sees the network data of a request, and our hosting provider is no exception: IP address, timestamp, the page requested, the browser string. Those records are created and kept by the hosting provider under its own retention rules; we do not query or use them.
What we do not do
These limits apply to the app itself and to our servers.
- We do not record which sites or apps you open through the tunnel.
- We do not record the contents of your traffic.
- We keep no DNS query log.
- We do not store your real IP address tied to your online activity.
- We do not sell traffic, rent out your connection, or embed proxies in other apps.
- We do not ask for or store your email, phone number, name, contacts, photos or location.
What leaves the device
Each item has its own purpose.
- Connection statistics: whether a connection succeeded, which location it used, and the country code of your network. This is how we see which locations have stopped working. No identifiers, no content, and your IP address is not written to a log.
- Product analytics: events such as app start and connection outcome, the app version, device model, system language and a random install identifier. We call that identifier pseudonymous rather than anonymous: it is not linked to any account and holds none of your data, but it stays the same from install to uninstall, which means events from one install are linked to each other. Reinstalling the app resets it.
- Alongside each such event the analytics service automatically attaches a technical description of the device and network: manufacturer and model, Android version, screen size, language and time zone, the browser string, connection type and carrier. We do not compile that list — their library adds it, and it cannot be switched off piece by piece. Their side also sees the IP address of the request, which is what the country is derived from.
- Advertising data: the device advertising ID and the IP address the ad request comes from. Ad networks receive these. We are the ones who put their code in the app, so the transfer is our responsibility — but we do not receive or store this data ourselves.
Who we pass it to
Product analytics goes to PostHog, a third-party analytics service. Its European endpoint, eu.i.posthog.com, receives the data. We run it in anonymous mode: no user profiles are created, and session replay and automatic events are off.
Connection statistics are received by our own server and are not passed to third parties.
Advertising
The app is free and paid for by ads. Ads are served through an advertising mediation partner that connects third-party ad networks to the app. Those networks are independent controllers: they receive the device advertising ID, the IP address of the ad request and technical details about the device, and they process them under their own policies.
The mediation partner and the networks connected through it will be named here, with links to their policies, before the app is published on Google Play. One caveat worth stating up front: in a real-time auction the set of ad buyers changes, so that list will be complete as of publication rather than permanently; the current list of partners will be available inside the app.
You can reset the advertising ID and, on supported Android versions, delete it: Settings › Google › Ads. Once deleted, ad networks stop receiving that identifier. Ads themselves do not go away, and how personalised they remain depends on other settings and signals we do not control.
Permissions
- VPN permission. Android itself asks for this with a system dialog. No VPN app can work without it: it is what lets the app create a tunnel.
- Internet access. Needed in order to connect.
- The persistent VPN notification. While the tunnel is up, Android requires it to be shown — that is a system requirement.
- Notifications from us. When a session ends and the tunnel goes down, we send a notification offering to reconnect. That one is our choice, not a system requirement, and it can be switched off separately in Android notification settings — the persistent one stays.
How long it is kept
Connection statistics are kept for no longer than twelve months, after which only aggregate figures remain, with no individual records.
Product analytics are kept for no longer than twelve months tied to the install identifier, and only in aggregate after that.
How to delete your data: reinstall the app — the install identifier changes and new events are no longer linked to the old ones. We can delete records accumulated before that only if you send us the previous install identifier, which the app shows you. Without it there is nothing to look them up by: you have no account, and we do not store your address.
Data received by ad networks is held by them, under their rules — that is also where it has to be requested or deleted.
Children
The app is not intended for children under 13 and does not collect age information. If you learn that a child is using it anyway, write to us.
Changes
If we change this policy, the date at the top of the page changes with it. Material changes will also be noted in the Google Play release notes.