We use cookies to provide you a better service and analyze traffic. To find out more about cookies, please see our Cookie Declaration. By continuing to browse our website, you agree to our use of cookies.
We use cookies to provide you a better service and analyze traffic, To find out more about cookies, please see our Cookie Declaration.
Our website relies on these cookies for proper functionality.
These cookies are utilized to retain your preferences, such as language selection.
Cookies enable us to gain insights into our visitors and enhance their browsing.
Cookies that are used to track conversions for ads platforms.
Ads help keep X-VPN's mobile free plan running, but they don't come at the cost of your privacy.
No VPN activity shared with advertisers All ad partners are vetted and established Ads shown only on iOS & Android free plans No IDFA on iPhone, no AAID on Android
NO-LOGSVERIFIED
Running a free mobile VPN still comes with real costs. It includes manual selection of 26 locations (with 13 city-level servers), no traffic or speed limits, Kill Switch, and widely used open-source protocols like WireGuard and V2Ray. All of that needs servers, bandwidth, and ongoing maintenance. Ads make it possible.
Privacy is why you use a VPN. So even though ads fund the free plan, we draw clear data boundaries between you and our advertising partners. Here's what advertisers do not receive from X-VPN.
IDFA on iOSAndroid Advertising IDReal IP addressBrowsing activityDNS requestsVPN connection recordsVPN account informationPayment informationOn iPhone, every device has an advertising ID (the IDFA), the code apps use to follow you from one app to the next. X-VPN is built not to touch it.
Each ad component (SDK) in X-VPN is set up with IDFA collection switched off from the start, before any ad request is made. Your advertising ID is never picked up on our side.
Apple only requires the "Allow tracking?" permission prompt when an app collects your data to track you across other apps and websites. Since X-VPN doesn't, the prompt has no reason to appear.
Because no IDFA is collected, there's no identifier value to include in ad requests, and no advertising ID for any ad partner to read.
On Android, we control ad tracking on two fronts: your advertising ID, and the ad SDK itself.
Cross-app tracking on Android runs on the AAID, your device's advertising identifier. You can turn off personalised advertising while using X-VPN, and once you do, your AAID isn't used to target ads or profile you.
Many Android apps pass each ad request through a mediation layer to several ad networks at once, so your data reaches multiple companies. X-VPN uses only AdMob, which keeps ad-related data within Google's own framework.
Every X-VPN user, free or paid, is covered by the same audited no-logs policy, which runs independently of our ad system. We don't collect the data below, so there's nothing to hand to advertisers or anyone else.
IP addresses (yours or your destinations)Browsing activity or websites visitedDNS queriesVPN server connection informationDownloaded contentConnection timestamps, length, or data volumeBeyond that, the mobile free plan doesn't require sign-up. No email, no password, no account at all. What we do see is limited to anonymous, aggregated metrics like CPU load, nothing tied to you.
From our technical implementation to our data-transfer rules, we restrict the identifiers, IP, activity, and VPN records that advertisers can access, keeping advertisers' reach to a minimum.
Because what an advertiser can reach also depends on the platforms we integrate, we hold every partner to three strict standards before they can serve an ad.
Every partner has to publish a privacy policy, setting out what data it collects, what that data is used for, who it's shared with, how long it's kept, the legal basis for processing it, and the rights you have over your own data.
The IAB Transparency and Consent Framework (TCF) is the ad industry's main technical standard. Partners that join must register publicly on the IAB Global Vendor List, so their status is open to check. They also commit not to read your device's advertising ID or serve personalised ads without your consent. Your choice is recorded as a standard consent signal (the TC String) and passed between the app and its ad partners, so the same answer follows your data wherever it goes.
GDPR and CCPA are the privacy laws of the EU and California, two of the strictest in the world. A partner bound by these laws must give you real control, such as the right to access or delete the data it holds about you, and must answer to regulators if it fails to comply. Its privacy promises are backed by law, not just goodwill.
Against those standards, we chose four partners: AdMob, InMobi, Liftoff, and Chartboost, each with its own privacy strength.
Run by Google directly, so ad data stays with one accountable provider under Google's own privacy framework, rather than passing through a chain of outside networks.
Backed by a separate privacy policy written specifically for users in Europe, where data protection law is strictest, on top of GDPR and CCPA support.
Bound by a signed data processing agreement covering EU, UK, and California law, which makes its privacy commitments enforceable, not just stated.
Part of LoopMe, which holds the ePrivacy seal, awarded after an independent external audit of its data practices against EU standards. Its SDK applies your consent choices before an ad loads.
We also filter ad content displayed by advertisers. Still, if an ad looks inappropriate, misleading, or isn't working properly, please let us know via 24/7 live chat or email at support@xvpn.io. We review every report and coordinate with our ad partners to take action where needed.
No. There are two sides to this, and neither gives us identifying data to sell.
On the VPN side, our independently audited no-logs practices mean we don't record your VPN traffic, browsing history, DNS queries, visited sites, or connection times. There's simply no activity data tied to you.
On the ad side, we don't rely on the identifiers advertisers normally use to recognise you. On iPhone, X-VPN doesn't use the IDFA at all. On Android, you can switch off personalised advertising so your advertising ID isn't used for ad targeting. Without those identifiers, there's no profile of you to build or sell.
X-VPN earns ad revenue through standard mobile advertising models, such as ad impressions, clicks, installs, conversions, and performance measurement. The exact model may vary by ad partner and campaign type.
No, ads are served within the app interface and do not pass through your VPN connection itself. Ad loading and your VPN traffic are handled separately, so ads do not affect your connection speed, throughput, or stability.
No. On iPhone, X-VPN doesn't request the IDFA or integrate the App Tracking Transparency framework, so no cross-app tracking identifier is shared with ad partners. On Android, you can switch off personalised advertising, which stops your advertising ID (the AAID) from being used to track you across apps or build a profile.
Yes. If you see an ad that feels misleading, inappropriate, or doesn't load correctly, reach out anytime through our 24/7 live chat (the green bubble at the bottom-right of the screen) or email us at support@xvpn.io. Every report is reviewed, and we'll work with the relevant ad partner to address it.
X-VPN Premium removes all ads from the mobile app and unlocks the full X-VPN experience. Premium users get access to 10,000+ servers across 250+ locations, faster connection speeds, simultaneous use on multiple devices, and our Ad Blocker, which goes a step further by blocking ads, trackers, and malicious sites across your entire browsing experience.
The free version includes strong basic protection, with AES-256 encryption, no sign-up, and access to 1,000+ servers. X-VPN Premium gives you more — faster speeds, region selection, streaming and gaming servers, and advanced features like double VPN and ad blocker.
No logs to sell, no data to hand over, and ad partners you can check for yourself. The free plan stays free, your privacy stays yours.
