Methmine™ VPN — Privacy Notice

Last updated: October 15, 2026

This Privacy Notice explains what personal data METHMINE LLC processes when you use Methmine VPN: the VPN service, the Methmine VPN apps, our Telegram bots and the methminevpn.com websites (together, the "Service"). Under the Company Terms (section 1.3), this Notice governs any question about personal data: nothing in the Company Terms or the Product Schedule allows us to collect, use or disclose more than this Notice describes.

Controller: METHMINE LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA, Filing ID 2026-002105261. Contact for privacy matters: contact@methmine.com, subject "Privacy request".

1. The short version

• We do not log your online activity. We do not log the websites, domains or URLs you visit, the DNS queries you make through the VPN, the content of your traffic, your destination IP addresses, or the IP address you connect from together with a time or a session.
• To sign you in we keep one identifier: your numeric Telegram user ID, or, for other sign-in methods, a keyed cryptographic hash of your email address or provider account ID.
• We count how much data your account uses per day (one number per day), keep that series for 32 days, and keep running totals for your plan's limits.
• The apps contain no analytics, advertising or tracking code, and no crash reporting today.
• Diagnostic logs stay on your device unless you copy one and send it to support yourself.
• We do not sell or share your personal information, and we do not use it for advertising.

The rest of this Notice gives the details. Section 3 lists everything we process, section 4 what we do not.

2. How the VPN handles your traffic

When you connect, your device opens an encrypted tunnel to one of our VPN servers. To carry your traffic, that server necessarily handles your device's IP address and the addresses your traffic is going to, in memory, for as long as each connection is open. Our VPN servers are configured not to write this information to logs, and we do not store it after the connection ends.

DNS. When your traffic goes through the VPN, the names of the websites you visit are looked up (DNS) by a public DNS resolver: by default Cloudflare (1.1.1.1). In the app you can choose another resolver, such as Quad9 or AdGuard, and turning on blocking options switches to a filtering resolver (AdGuard or Cloudflare for Families). The resolver receives these lookups from our server, not from your IP address, and handles them under its own privacy policy. We do not log them.

Before you connect, the app may measure the response time of our servers directly from your device, so the servers see your IP address the way any internet server does. These measurements are not logged.

3. What we process

3.1 Your account

3.2 Your devices

When you add a device, the app creates a device key on that device and registers it with us. We store, for each device:

• the device's public key (the private key never leaves the device);
• the platform (Windows, Android, iOS or macOS), the app version, and whether the key is protected by the device's hardware;
• a device label, so you can tell your devices apart: on Windows the computer name, which you set and which may contain your name; on Android the manufacturer and model; on Apple devices the device type and model identifier (for example "iPhone (iPhone16,2)");
• when the device was registered, last seen (updated when the app starts or connects) and last connected (see 3.3), and whether it was revoked.

We do not collect hardware serial numbers, IMEI, MAC addresses, advertising IDs or your operating system version. Our VPN management system receives a hash of the device key, the platform, the app version and a generic label (such as "Methmine VPN Windows #ab12"), not your device label.

3.3 Connection status

While the tunnel is up, the app sends a short signal once a minute containing only a random session ID. We use it to update the device's "last connected" time and then discard the session ID. This tells us that a device is connected, not what it does.

Our VPN management system also keeps basic status information for each account, such as whether and when it was last online and which server it last used. This is overwritten as it changes and is not a history of your sessions.

3.4 Data usage

We record how many bytes your account used per day (UTC), as one number per day, from the counter in our VPN management system. We keep that daily series for 32 days and show it to you in the app. We also keep running totals of data used, which we need to apply your plan's data allowance. Our VPN management system keeps its own traffic counters per account, which may include daily totals per server. None of these counters say what you did, which sites you visited, or which device or app the data came from.

3.5 Payments

Payments are handled by our Telegram bot and by authorized payment providers: the payment services available in Telegram, Apple, Google or a card payment provider. They process your payment details under their own privacy policies. We never receive your full card number. We and the payment provider keep a record of each purchase (what was bought, when, the amount, and the provider's reference) for accounting, tax, refunds and fraud prevention.

3.6 Our Telegram bots and support

When you use our Telegram bot @MethmineVpnBot or our support bot @methminesupportbot, Telegram passes to the bot what it passes to every bot: your Telegram user ID, name, username and language setting, and the messages you send. Our bot uses them to manage your trial and subscription. Support conversations contain whatever you choose to tell us, including any diagnostic log you paste. Telegram itself also processes these messages under its own privacy policy.

3.7 Update checks

The apps check for updates periodically. The request contains only the platform, the update channel and the installed app version. It contains no account or device identifier, and we do not log it.

3.8 Diagnostic logs

• The diagnostics screen in the app builds its report on your device, from a fixed list of checks. It does not contain domains, URLs or IP addresses. It leaves your device only if you copy it and send it to us yourself; the apps have no way to upload logs.
• On Windows, the tunnel service keeps a local log of its own state (such as start, stop, errors and byte counts), limited in size and rotated on your computer. It does not record domains or IP addresses and is not sent to us.

3.9 Crash reports

The apps do not send crash reports today. If we introduce them, they will run on our own servers, contain only technical information about the crash (such as the app version, platform and the error), never your traffic, the sites you visit or your IP address, and we will update this Notice before we do.

3.10 Our websites and API

The methminevpn.com websites use no cookies, no analytics and no third-party resources. Our web and API servers are configured not to keep access logs, and our API does not record the IP address of requests. Rate limits are applied by device, in memory.

3.11 Data stored only on your device

Your language, display settings, DNS choice, selected location, and the list of apps you include in or exclude from the VPN (split tunneling) are stored only on your device. Your sign-in tokens and the last connection settings are stored on your device in its protected storage (Windows DPAPI, the Android Keystore, or the Apple Keychain).

4. What we do not collect or log

• websites, domains or URLs you visit, and your browsing history;
• DNS queries made through the VPN;
• the content of your traffic;
• destination IP addresses;
• the IP address you connect from linked to a time, a session or your account;
• the times your sessions start and end, as a history;
• which apps on your device use the VPN;
• advertising IDs, contacts, location from your device's GPS, or files on your device.

Because we do not keep this information, we cannot provide it to anyone, including authorities (section 8).

5. Why we use your data, and our legal bases

Where we rely on legitimate interests, you can object (section 10). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

6. Who receives data

We do not sell or rent personal data, and we do not share it for advertising. We use these providers, each only for its task:

• hosting and server providers that run our API and VPN servers in several countries;
• Cloudflare, for the DNS of our domains, and public DNS resolvers (Cloudflare by default, or the one you choose) for lookups made through the VPN, as described in section 2;
• Telegram, for Telegram sign-in, our bots and support;
• Apple and Google, for their sign-in and app store purchases, where you use them;
• payment providers, for payments;
• an email delivery provider, for sign-in codes, where email sign-in is available.

We may also disclose data when the law requires it (section 8), to protect the rights, safety or property of our users, us or others, or to a successor in a merger, acquisition or sale of our business, which must protect it as this Notice describes.

7. International transfers

METHMINE LLC is based in the United States, and our servers and providers are in several countries. When we transfer personal data from the EU, the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum or Swiss amendments) with our providers where required, or on the transfer being necessary to provide the Service you asked for. Contact us for more information.

8. Requests from authorities

We disclose data only when we are legally required to, in response to valid legal process that applies to us. We review every request, ask for it to be narrowed or challenge it where it is overbroad or unlawful and we are allowed to, and disclose only the minimum required. Unless the law forbids it, we tell the affected user before disclosing.

What we could provide is limited to what section 3 describes, such as whether an account exists, its sign-in identifier, subscription status, registered devices and data totals. We do not have, and so cannot provide, records of the websites you visited, your DNS queries, your traffic, or which user was using a particular IP address at a particular time.

9. How long we keep data

When you delete your account, we immediately delete your subscription details, connection credentials, routing rules, daily usage series and pending sign-in records, and disconnect and sign out all your devices. We keep:

• your sign-in identifier (Telegram user ID or hashed identifier), the date you used a free trial, the account creation date and its running data totals, so that we can enforce one trial per person and prevent abuse. We keep these for as long as we offer trials, and in any case for no longer than 3 years after deletion;
• the records of your former devices (public key, label, platform, app version and dates), detached from the account, for security and abuse prevention, for the same period.

If you want any of these erased sooner, write to contact@methmine.com (subject "Privacy request"); we will erase them unless we need them to establish, exercise or defend legal claims. Deleting your app account does not cancel a subscription bought through an app store, and does not delete records held by our Telegram bot or payment providers; ask us if you want those deleted too.

10. Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format (portability), and withdraw consent where we rely on it. You can delete your account in the app where the app offers it, or exercise any right by writing to contact@methmine.com with the subject "Privacy request". We may need to confirm that the request comes from you, for example by asking you to write from the Telegram account you sign in with. We answer within one month (EU/UK GDPR) or 45 days (US state laws), extendable where the law allows.

If you are in the EU, the EEA, the UK or Switzerland, you can also complain to your data protection authority. We would appreciate the chance to address your concern first.

11. California and other US states

This section applies to residents of California and other US states with consumer privacy laws.

• Categories collected in the last 12 months: identifiers (Telegram user ID, hashed email or account ID, device keys and labels); commercial information (subscription and purchase records); limited internet activity information (data usage totals, connection status, app version). We do not collect precise geolocation, and we do not use sensitive personal information to infer characteristics about you.
• Sources: you, your devices, Telegram, Apple and Google (sign-in), and payment providers.
• Purposes: those in section 5.
• Disclosure: to the service providers in section 6, for business purposes only.
• We do not sell or share personal information, as those terms are defined in the CCPA, and have not done so in the last 12 months. We do not knowingly sell or share the personal information of consumers under 16.
• Your rights: to know, access, correct and delete your personal information, and not to be discriminated against for using these rights. You can use an authorized agent, and we may ask the agent for proof of authorization. Because we do not sell or share personal information, there is nothing to opt out of; we treat Global Privacy Control signals accordingly.

12. Children

The Service is not intended for children under 16, and we do not knowingly collect personal data from them. If you believe a child under 16 has given us personal data without the consent of a parent or guardian, contact us and we will delete it.

13. Security

We protect your data with encryption in transit, device keys that stay on your device in hardware-backed or system-protected storage, signed connection settings that our apps verify, encryption of sensitive data at rest, keyed hashing of sign-in identifiers, and access to our servers limited to the people who operate them. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as the law requires.

14. Changes to this Notice

We will post any change here with a new "Last updated" date. If a change is material, for example if we start collecting a new kind of data, we will tell you in the app or through our Telegram bot before it takes effect, and where the law requires your consent we will ask for it. Previous versions are listed below.

15. Contact

METHMINE LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Email: contact@methmine.com (subject "Privacy request").

This Notice is written in English, and the English version is binding. Translations are for convenience.

Version history