Privacy policy – Router VPN

1. Controller

No data protection officer has been appointed, as the legal requirements for this are not met (Section 38 of the German Federal Data Protection Act, BDSG). If you have any questions about data protection, please contact the controller named above directly.

2. Visiting the website and server log files

When you visit this website or download files, the web server automatically stores technical data: date and time, file requested, amount of data transferred, access status, referrer URL, browser type and operating system, and the IP address (anonymised).

The purpose is to provide the website and the downloads securely and without errors and to prevent misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). The log files are deleted after 7 days at the latest. They are not combined with other data.

The website is run by a web hosting provider that processes the data on our behalf (Art. 28 GDPR). The connection is encrypted using HTTPS/TLS.

3. The Router VPN app

Router VPN connects your Android phone to your own router at home (e.g. a FRITZ!Box) via an encrypted WireGuard tunnel, so that you can reach your home network on the go – for example with Fritten&Fax or Softstringsphone.

• Only to your own router: The app uses Android’s VPN function (VpnService) with the official WireGuard library. The tunnel leads exclusively to the router whose WireGuard settings you import yourself. We do not operate any VPN servers; your traffic never passes through us and is neither analysed, modified, logged nor passed on to third parties by the app. Which apps use the tunnel and whether only connections to your home network or also their internet traffic go through it, you choose in the app (default: only our apps, only the home network); with “Everything”, the internet traffic of these apps goes out via your connection at home.
• No account, no telemetry, no ads: The app collects no personal data, requires no registration, contains no advertising or analytics libraries and sends nothing to us or to third parties.
• Local storage: The imported VPN settings contain a private key. They are encrypted with AES-256-GCM (key in the Android Keystore), stored only on the phone, not included in Android backups and never logged. “Delete” on a connection or uninstalling the app removes them.
• Recognising home and choosing apps: To recognise when you are at home (automatic by network), Router VPN asks your own router for its device ID – only in your own Wi-Fi or through the tunnel – and stores it only on your phone. To let you choose apps, the app reads the list of installed apps with an icon in the app drawer; it stays on the phone. No location access, none of this is sent anywhere.
• Camera (optional): Only if you tap “Scan QR code” to read your router’s QR code. Recognition runs on the phone (ZXing, without Google Play services); camera images are neither stored nor sent. Alternatively, the settings can be imported as a file or text.
• Permissions: VPN – Android asks once for your approval before it is switched on for the first time. Internet – for the tunnel to your router. Network state – to tell mobile data from Wi-Fi. Visibility of installed apps (apps with an icon in the app drawer, no access to all packages) – for choosing apps, see above. Camera (optional) – see above. Start after reboot – to switch a VPN that was on back on after a restart. The VPN can be switched off at any time in the app, via the quick setting or in the Android settings.
• Download: When you download the app from this website, only the server log data described in section 2 is generated. If you obtain the app via Google Play or the Galaxy Store, the store operator (Google or Samsung) processes data in accordance with its own terms.

Insofar as personal data is involved at all, the legal basis for processing on your device is Art. 6(1)(b) GDPR (providing the VPN connection you requested); we ourselves receive no data from the app.

How the tunnel works, which traffic uses it and how to set it up is explained on the page Router VPN explained.

4. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). There is no automated decision-making, including profiling (Art. 22).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is:

5. Changes

This privacy policy is updated whenever the website or one of the apps changes. The version published here applies. Last updated: October 2026.