Privacy Policy for VPN Hotspot & Proxy
Applies to: VPN Hotspot & Proxy (com.ostechnologies.vpnhotspotproxy) on Android. Last updated: 26 October 2026
In short: VPN Hotspot & Proxy has no accounts and asks for no personal information. It runs a proxy server on your phone, and the traffic of the devices that use it passes through your phone straight to the internet. We do not run any servers for that traffic, so we never receive it. Your settings stay on your device. The app shows ads through Google AdMob and uses Google Firebase for diagnostics and notifications, and those Google services send limited technical data to Google as described below.
At a glance
| Information | Where it goes |
|---|---|
| Traffic of devices that use your proxy (sites, content, DNS) | Goes from those devices through your phone to the internet. It does not go to OS Technologies. |
| The port you choose and your session timer | Stored on your device only. Never sent to us. |
| Name, email, phone number, contacts, photos, files, location, accounts | Not collected. The app has no sign-up and does not ask for access to these. |
| Advertising ID and device information used to show ads | Sent to Google AdMob. See Advertising below. |
| Crash reports, performance, aggregate usage and notification token | Sent to Google Firebase. See Analytics, notifications and crash reports below. |
Who we are
The app is published by OS Technologies ("we", "us"). Contact: ostechnologies.apps@gmail.com.
What the app does
When you tap Start Proxy Server, the app opens an HTTP and SOCKS5 proxy on a port you choose and shows the local address, for example 192.168.1.2:8080. Other devices on the same Wi-Fi network or hotspot can use that address as their proxy, so they share the internet connection your phone is using, including a VPN. The app can also check whether the companion app VHP Bridge (com.ostechnologies.vhpbridge) is installed and start it when you use a VPN that tunnels the whole device. This check happens on your device.
Traffic that passes through your phone
- Traffic from the devices that use your proxy is forwarded by your phone to the internet. We do not receive, store or sell it.
- Anyone on the same Wi-Fi network or hotspot who knows the address and port can try to use the proxy while it is running. Only use it on networks you trust, and stop the proxy when you are finished.
- The websites and services those devices connect to will see your phone's (or your VPN's) connection, not ours.
- HTTP and SOCKS5 do not encrypt the link between a connected device and your phone by themselves. Encrypted HTTPS traffic stays encrypted end to end.
- While the proxy runs, the app may write diagnostic messages to the standard Android system log on your device, for example local addresses, ports and the destination of plain HTTP requests. That log stays on your device. We do not collect it and the app does not send it anywhere.
Information stored on your device
The app stores the port you chose and the state of its 24-hour proxy session timer (time remaining and expiry time) in its private storage on your device. The timer is calculated locally and is not sent to us. If you use Android's device backup, Android may include these settings in your own Google backup. They are removed when you clear the app's data or uninstall it.
Advertising
The app shows ads served by Google AdMob, including app-open ads. AdMob may collect and use device identifiers such as the Android advertising ID, together with device and usage information, to serve, measure and secure ads, and may show personalised ads where permitted. Where required (for example in the EEA and UK) the app asks for your consent through Google's User Messaging Platform before ads are personalised, and you can review your choice later from Privacy options in the app menu where it is shown. See Google's advertising policies at https://policies.google.com/technologies/ads.
Analytics, notifications and crash reports
The app includes the following Google Firebase services. Google processes this data as our service provider; see https://firebase.google.com/support/privacy and https://policies.google.com/privacy.
- Firebase Crashlytics: crash diagnostics such as stack traces, device model, OS version, app version and a random installation identifier.
- Firebase Analytics: automatically collected usage events, a pseudonymous app-instance identifier, approximate region derived from IP address (the IP address itself is not retained by Analytics), device and OS attributes and, where available and permitted, the advertising ID.
- Firebase Performance Monitoring: performance data such as start-up time and network request timings.
- Firebase Cloud Messaging and In-App Messaging: to deliver service announcements and in-app messages. This uses a registration token that identifies this app install, and the app subscribes your device to a general announcements topic.
We add no tracking of our own, and we do not link these identifiers to your name, your proxy or the traffic of your devices.
How we use information and who we share it with
We use the data above to keep the app stable, understand aggregate usage, show and measure ads, send occasional service notices, prevent abuse and meet legal obligations. We do not sell or rent your data. Google LLC (AdMob and Firebase) processes data as described above. We may disclose information if the law requires it or to protect rights, safety or property.
Retention
- Crashlytics crash records: up to 90 days.
- Firebase Analytics event data: for the period set in our Firebase project, up to 14 months.
- Notification tokens: until refreshed, or until the app is uninstalled or its data cleared.
- Settings stored on your device: until you clear the app's data or uninstall.
International transfers
Firebase and AdMob data is processed on Google's servers, which may be outside your country, including the United States. Google applies Standard Contractual Clauses and other safeguards.
Permissions the app requests
- INTERNET, ACCESS_NETWORK_STATE and CHANGE_NETWORK_STATE: to run the proxy, detect network changes and load ads.
- ACCESS_WIFI_STATE and CHANGE_WIFI_STATE: to find your Wi-Fi or hotspot address.
- FOREGROUND_SERVICE and FOREGROUND_SERVICE_CONNECTED_DEVICE, and WAKE_LOCK: to keep the proxy running while you share your connection.
- POST_NOTIFICATIONS: to show the proxy status notification on Android 13 and later.
- AD_ID: so AdMob and Firebase can read the advertising ID as described above.
- VHP Bridge control permission: to start and stop the companion VHP Bridge app on your device.
Security
Data sent to Google (Firebase and AdMob) is encrypted in transit with TLS. The proxy runs on your device and is reachable only over the network it is bound to. As explained above, anyone on that network who knows its address can use it while it runs.
Your choices
- Ads: reset or delete your advertising ID in Android Settings > Privacy > Ads. Where ad consent is required, you are asked before personalised ads are used.
- Notifications: turn them off in Android Settings > Apps > VPN Hotspot & Proxy > Notifications.
- Stop all collection: uninstall the app. Nothing further is collected after that.
- If you are in a region that gives you access, correction, deletion, objection or portability rights (for example the EEA, UK or California), email ostechnologies.apps@gmail.com. Because the identifiers above are not linked to your name, include your Crashlytics installation ID or app-instance ID if you want a specific record found.
Children
The app is a networking utility and is not directed to children under 13 (or under 16 where applicable). We do not knowingly collect information from children. If you believe a child has provided information, contact us and we will delete it.
Changes to this policy
We may update this policy as the app or the law changes. The new version will appear on this page with a new "Last updated" date.
Contact
OS Technologies
Email: ostechnologies.apps@gmail.com
Website: https://ostechnologies.web.app
This policy covers the VPN Hotspot & Proxy Android app only. VHP Bridge and Proxy All Apps have their own privacy policies.