Privacy

RostamVPN is operated by Red Team LTD. This page says what the app and our servers hold, what Protect Mode sends when it checks a destination, and how to get rid of all of it. It is meant to be read once, in full.

What the VPN stores

There are no traffic logs. We do not record the sites you open, the apps you use, or the content of anything you send or receive. Per device, we hold:

• A device identifier the app generates on first run. It is not your phone's hardware id, and it is attached to no name, because we never ask for one.
• The IP address our servers see when you connect, with the country and the network it belongs to. Kept to run your plan and to stop abuse.
• The time of your last connection, the volume of data carried, and your time zone.
• Your subscription state: whether a plan is active, and when it ends.

That is the whole list. Nothing in it names you, and nothing in it describes where you went.

What Protect Mode sends

Protect Mode does not do the checking on your device. To check a destination, the app sends that destination together with the device identifier to our service, and receives a score back. That is the honest description of how it works, and we would rather state it than let you assume otherwise.

The destination is used to answer that one request and is not stored. What the service keeps is a list of non-reversible 64-bit hashes, one per destination, for that device and for the current UTC day only. It exists for a single purpose: to count how many distinct destinations a device has checked, so that the daily limit of 3000 can be enforced. The list resets when the UTC day changes, and it is deleted entirely 25 hours after that device's last check.

A hash cannot be turned back into the address it came from, and the list carries no times and no order, so no browsing history is built from it — not by us, and not by anyone who might take it.

Protect Mode can be turned off at any time, in the app. With it off, nothing is checked and nothing is sent.

We do not sell or share your data

RostamVPN does not sell, use or disclose your data to third parties for any purpose.

There is no advertising code and no analytics code in the app, and nothing about your use of it is shared with anyone for advertising or measurement.

Our threat-intelligence supplier is the party people assume must be receiving something. It is not. The supplier sends us a list, which we combine with our own analysis, and nothing travels the other way: no destination you reach, and no identifier of yours, ever leaves our servers for them. For purchases, Apple and Google handle the subscriptions bought inside their own stores, and if you buy on this website instead, the payment processor you pick there takes the payment. Those are the only companies that handle any part of this on our behalf.

There is no account

RostamVPN has no sign-in. No email address, no password, no username, no phone number. The app knows a device by the identifier above and by nothing else, so there is no profile to take, to lose, or to hand to anybody.

Purchases

A subscription bought inside the app is handled by Apple or by Google under their own terms; they tell us that a plan is active and until when, and we attach that to the device identifier. We never see your card. A subscription bought on this website is handled by the payment processor you choose there, on the same footing: we receive the fact of the payment, not the card behind it.

Deleting everything

Removing the app removes the device identifier it generated, and with it the only key that joins you to anything we hold. To have the server side erased as well, open Delete your data in the footer of this page; it works from the device identifier and asks for nothing else about you.

If you would rather ask a person, write to nazar@rostam.app.

Changes

If this page changes in a way that matters, the effective date at the top changes with it, and the app links to the new version. We do not quietly rewrite a page and leave the old date standing.

Contact

Questions about any of this go to nazar@rostam.app.

RostamVPN is not directed at children under 13, and we do not knowingly collect anything from them.