DragonTCP VPN Privacy Policy
DragonCoreSSH is the name of this project, not a registered company. The party responsible for it is the holder of the Google Play developer account through which the app is distributed. Google publishes that verified name on the store listing, and that is the party accountable under this policy.
1. Summary
DragonTCP is a VPN. When it is switched on, your device's internet traffic is carried through a server that we operate. That is the purpose of the app, and it means that the server necessarily handles your traffic in order to forward it.
We do not ask you to create an account. We do not ask for your name, email address, or phone number. The app contains no advertising and no third-party analytics.
This policy is written with reference to the Brazilian Lei Geral de Proteção de Dados (LGPD, Lei nº 13.709/2018).
2. Information the App Stores on Your Device
All of the following information stays on your device and is not transmitted to us:
| What | Why | Where |
|---|---|---|
| Connection profiles | To save the settings you choose for different networks. | App-private storage |
| Network calibration and learned settings | So the app does not have to determine the same network characteristics again every time. | App-private storage |
| Diagnostic log | To allow you to see which connection step succeeded or failed. | Memory and app-private storage |
| Session counters | To display connection speed, transferred bytes, and session time. | Memory only; cleared when the VPN disconnects. |
You can clear saved network measurements using RECALIBRATE, clear the diagnostic log using CLEAR on the log screen, and remove all locally stored app data by uninstalling the app.
This data is excluded from Android cloud backups.
3. Information Handled by the VPN Server
In order to forward your internet traffic, the VPN server necessarily processes information including:
- Your device's IP address as seen by the server, which is required to maintain the network connection and return data to your device.
- Destination addresses, hostnames, and ports requested by your device.
- The contents of network traffic to the extent that the traffic is not already encrypted by the app, website, or service you are using.
We do not retain user traffic data.
Connections use randomly generated UUID session identifiers. These identifiers are not linked to a DragonTCP user account, because DragonTCP does not require user accounts.
Legal basis (LGPD art. 7): the processing described above is necessary to provide the VPN service requested by the user. Where we are legally required to retain or process information, the applicable basis is compliance with a legal obligation.
We do not sell or rent this information, and we do not use it for advertising or profiling.
4. Encryption and What a VPN Does Not Do
Traffic between your device and our VPN server is encrypted and disguised so that restrictive networks are less able to recognize and block the connection.
The limits of this protection are important:
- The VPN tunnel protects traffic between your device and our server. Beyond the VPN server, traffic continues to its requested destination normally.
- A VPN does not make you anonymous. It does not prevent tracking performed by apps, websites, services, accounts, cookies, or other technologies you use.
- When you use HTTPS or another end-to-end encrypted protocol, that protocol's encryption continues to protect the content. When traffic is not independently encrypted, the VPN server may be able to process or view its contents as necessary to forward it.
5. Legal Requests
We operate from Brazil and are subject to Brazilian law.
Under the Marco Civil da Internet (Lei nº 12.965/2014, including arts. 10 and 22), communications content and records protected by law may be subject to disclosure where required by a valid court order.
We will not voluntarily provide protected records in response to an informal request from an authority or private party when Brazilian law requires a court order.
We can only provide information that we actually possess at the time a legally valid disclosure order is received.
Where a valid court order requires disclosure, we will comply with applicable law. Where legally permitted, we may notify affected users.
6. Children and Adolescents
DragonTCP is intended for adults. The app is published with an 18+ target audience, and we do not knowingly process personal data belonging to anyone under 18.
Under LGPD art. 14, the personal data of children and adolescents receives special protection.
If you believe that someone under 18 has used the app and that we retain personal data relating to that person, contact us at [email protected] . We will review the request and delete applicable information where required.
7. Permissions the App Requests and Why
| Permission | Purpose |
|---|---|
INTERNET |
Allows the app to communicate with the VPN server and forward network traffic. |
FOREGROUND_SERVICEFOREGROUND_SERVICE_SPECIAL_USE
|
Allows the VPN to operate as a foreground service so that Android can keep it running and make its active state visible while connected. |
POST_NOTIFICATIONS |
Allows the app to show its ongoing VPN connection notification and connection information such as live speed. |
BIND_VPN_SERVICE (system permission) |
Allows the app's VPN service to establish a device VPN after you approve Android's VPN confirmation dialog. |
The app does not request access to your contacts, location, camera, microphone, personal files, or installed-app list.
8. Your Rights Under the LGPD
Article 18 of the LGPD provides data subjects with rights relating to their personal data, including rights to:
- confirm whether personal data is being processed;
- access personal data;
- correct incomplete, inaccurate, or outdated data;
- request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
- request data portability where applicable;
- receive information about data sharing;
- request deletion where applicable; and
- withdraw consent where processing is based on consent.
Because DragonTCP does not use user accounts and does not retain VPN traffic data, in many cases we will not possess stored information that allows us to identify a particular user or associate a request with a specific connection.
If we cannot identify data associated with a request, we will explain that rather than attempting to guess which information belongs to you.
To exercise your rights, contact: [email protected] .
We will respond in accordance with the deadlines and requirements established by applicable Brazilian law.
If you are not satisfied with our response, you may contact the ANPD — Autoridade Nacional de Proteção de Dados: https://www.gov.br/anpd .
9. Where the Data Goes
Our VPN server is located in Brazil.
Traffic transmitted through the VPN then continues from our server to the internet destination requested by your device. That destination may be located outside Brazil.
Communication with servers in other countries is an inherent part of accessing internet services hosted outside Brazil.
10. Changes to This Policy
If this Privacy Policy changes, we will update the date associated with the published policy and publish the new version at the same URL.
Material changes may also be mentioned in the app's release notes and announced through the DragonTCP Telegram channel: https://t.me/dragontcp .
11. Contact
DragonCoreSSH
Email:
[email protected]