Waypoint VPNWaypoint VPN
Waypoint VPN · Privacy Policy

Privacy Policy for Waypoint VPN

Last updated: September 15, 2026

This policy applies specifically to Waypoint VPN, Android package com.waypoint.vpn, operated by Redwood Games Dev. Waypoint VPN lets a user choose an available VPN route and start or stop a VPN connection.

1. Information we collect

To create an anonymous session, display available routes, prevent abuse, and diagnose connection reliability, Waypoint VPN sends the following limited data to our HTTPS API:

  • a randomly generated installation identifier (the server stores only a one-way cryptographic hash);
  • platform and app version;
  • a short-lived anonymous session token (the server stores only a one-way cryptographic hash);
  • when connection diagnostics are submitted: route/node ID, connection result, duration, and general error category.

2. VPN traffic

Waypoint VPN does not collect, inspect, record, store, or analyze the contents of VPN traffic. We do not log visited websites, URLs, destination addresses, DNS query contents, search terms, packet contents, communications, or the local device's browsing history. The selected relay carries traffic only to provide the VPN service.

3. How information is used

  • create an anonymous session and provide current VPN routes;
  • issue a short-lived node credential and establish the encrypted tunnel;
  • apply request-rate limits and prevent abuse;
  • measure aggregate connection reliability and fix service problems.

We do not use anonymous session information or VPN traffic for advertising, personalized profiling, cross-app tracking, or data brokerage.

4. Optional advertising

Waypoint VPN is supported by an optional advertising banner. Before the app requests an ad, it asks whether you want to continue with ads. If you choose to use the app without ads, the app does not initialize an advertising session or request, load, or display ads, and every VPN feature remains available.

If you enable ads, TopOn and the advertising demand partner enabled for this release, Smart Digital Marketing Technology (SDM), may process the Android advertising identifier, IP address, device and app information, approximate location derived from IP, and ad interactions such as impressions and clicks. This data is used only to deliver and measure non-personalized ads, limit repeated ads, maintain security, and prevent fraud. Waypoint VPN does not provide browsing history, DNS queries, visited destinations, packet contents, or other VPN traffic data to advertising partners.

Advertising data is processed under the advertising providers' own privacy terms and retention practices. We do not sell advertising data. You can change your choice at any time in the app under Settings > Ad privacy.

5. Sharing and storage

We do not sell user information or VPN traffic contents. When ads are enabled, the limited advertising data described above is transmitted to TopOn and its enabled advertising demand partner to provide, measure, secure, and prevent fraud in advertising. Limited hashed session records and aggregate connection diagnostics are stored on developer-controlled infrastructure for no longer than 180 days. API requests use HTTPS. Short-lived VPN credentials are kept in memory where possible and are not written to user-visible configuration or logs.

6. Security and deletion

Waypoint VPN uses Android system VPN permission controls and the open-source sing-box library locally to establish the encrypted tunnel. Uninstalling the app removes local session data. To request deletion of server-side records associated with an installation hash, contact us below.

7. Contact

Material changes to this policy will be posted on this page with a new effective date.