Privacy Policy
United VPN for iPhone and iPad · Last updated:
This Privacy Policy explains how the United VPN app (the “App”) handles information. The App is made by Cheese Quake LLC (“we”, “us”). We built the App so that it works without an account and keeps as much as possible on your device.
In short
- No account, no sign-up. We don’t ask for your name, email or phone number.
- No logs. Our VPN servers don’t log your activity or connections: no browsing history, traffic content, DNS queries, connection times or IP addresses.
- Ad and tracker blocking happens on your device. The domains you look up are not sent to us.
- Analytics and personalized ads are off by default. They turn on only if you switch on “Share Usage Data”.
- Free users see ads from Google AdMob. Premium subscribers don’t.
- Apple handles payments. We never see your payment details.
Contents
1. What we don’t collect
- Account information. The App has no accounts or logins.
- Your name, email address or phone number. The only exception is when you write to us yourself.
- Your browsing history, the content of your traffic or your DNS lookups.
- Logs of your VPN activity or connections (see No-logs policy).
- Your precise location, contacts, photos, camera or microphone.
- Your payment card or bank details.
2. How each feature handles data
VPN
When you connect, the App opens an encrypted OpenVPN connection (AES-256) to the server you picked, and your internet traffic travels through that server. The websites you visit see the server’s address instead of yours, and website names are resolved through the VPN while you are connected.
No-logs policy
Our VPN servers do not log your activity. We do not collect or store:
- the websites you visit or the content of your traffic;
- your DNS queries;
- your original IP address or the IP address assigned to you inside the VPN;
- connection and disconnection times or session length;
- the amount of data you use.
While you are connected, the server holds your device’s IP address in memory only to send your traffic back to you. It is not written to any log and is gone when you disconnect. All users connect with the same shared server settings, so there is no account or identity to link a connection to.
Server list and server status
The App loads the list of VPN servers from Google Firebase Realtime Database. To show server speed and pick the “Optimal Location”, it checks the free servers directly. Like any internet request, these requests reveal your device’s IP address to Google and to our servers. No other information is sent, and the list is saved on your device so it is available offline.
DNS Settings, Game Boost and Child Control
These modes change the DNS servers your device uses. The App creates a local VPN connection on your device that carries only domain name (DNS) lookups. Your other traffic goes to the internet directly, as usual. Each lookup is sent from your device to the DNS provider you chose. We don’t receive, log or store these lookups.
- Game Boost uses Google Public DNS.
- Child Control uses AdGuard DNS Family Protection.
- DNS Settings offers Google, Cloudflare, Quad9, CleanBrowsing, AdGuard, Control D, Wikimedia DNS and servers you add yourself.
The provider you choose processes your lookups under its own privacy policy (see Third-party services). Profiles you add are saved only on your device.
Block in All Apps
When you turn on Block in All Apps, the App creates a local VPN connection on your device. Only domain name (DNS) lookups pass through it, and they are filtered on your device against built-in blocklists. We do not receive, log or store the domains you look up or any other browsing data. Lookups that are not blocked go to Cloudflare’s public DNS resolver (1.1.1.1), or to the DNS server you selected in DNS Settings, only to be resolved. If the VPN is connected, the filtering happens inside the VPN connection on your device.
The “Recently Blocked” list is kept in your device’s memory only while blocking is running and is never sent to us. Domains you allow are saved only on your device.
Ad blocking in Safari
The App includes Safari content blockers. You turn them on in Settings › Safari › Extensions. The App gives Safari a list of rules, and Safari applies them by itself. Neither the App nor we can see which pages you open in Safari.
Private Browser
Pages in the in-app browser load directly from the websites you visit, through the VPN when it is connected. Searches you type are sent to DuckDuckGo. Open tabs (their address and a small preview image) are saved on your device so you can return to them. Websites may store cookies and similar data in the browser’s storage on your device, as in any browser. Ad blocking in the browser is optional and works entirely on your device.
Speed Test
The speed test downloads its list of test servers from Speedtest by Ookla and measures your connection against one of them. It also asks ip-api.com for your public IP address and approximate location (country and city), so the result can show which network you tested. Ping is measured with a few short requests to google.com. Like any internet request, these reveal your IP address to the services involved. Your test results, including the IP address and city shown, are saved only on your device in Speed History.
Solitaire
The built-in Solitaire game is a web page hosted on GitHub Pages. Loading it reveals your IP address to GitHub, as any web page would.
Notifications
If you allow notifications, the App schedules local reminders on your device while a connection profile is active. They are created on your device. We don’t use push notification servers and don’t collect a push token.
Support
If you email us, we receive your email address and whatever you choose to include in your message. We use it only to answer you.
3. Analytics and crash reports
Share Usage Data is a switch in the App’s menu and is off by default.
- While it is off, Google Analytics for Firebase collects nothing. Ads are non-personalized, and the App never asks for permission to track you.
- If you turn it on, Google Analytics for Firebase collects how the App is used: sessions, screens viewed, in-app purchase events, and events such as “VPN connected”, “DNS connected” and “speed test run”. It also collects your device model, iOS version, app version, an app instance identifier and the country or region derived from your IP address. We use this to understand which features people use and to improve the App. Turning the switch on also allows personalized ads (see Advertising).
Crash reports. We use Firebase Crashlytics to find and fix crashes and errors, for example when the server list fails to load. A crash report contains technical details such as the crash stack trace, device model, iOS version, app version and a random installation identifier. It contains no information about the sites you visit. Crash reporting stays on regardless of the Share Usage Data switch, because it is needed to keep the App working.
4. Advertising
The free version of the App shows full-screen ads from Google AdMob, for example before a VPN connection. Premium subscribers don’t see ads.
- Non-personalized by default. Unless you turn on Share Usage Data, we ask Google to show only non-personalized ads. Even non-personalized ads need some data, such as your IP address, device type and approximate location derived from the IP address. Google uses it to deliver ads, limit how often you see the same ad, measure ads and prevent fraud.
- Consent in the EEA, UK and Switzerland. In these regions the App shows Google’s consent form before ads are loaded. You can change your choice at any time under “Privacy Settings” in the App’s menu.
- Tracking permission. The App asks for Apple’s App Tracking Transparency permission only after you turn on Share Usage Data. If you allow it, Google may use your device’s advertising identifier to personalize ads. You can change this at any time in iOS Settings › Privacy & Security › Tracking.
Learn more about how Google uses data from apps that use its services: policies.google.com/technologies/partner-sites.
5. Purchases
Premium subscriptions are sold and billed by Apple through the App Store. Apple processes your payment under its own privacy policy, and we never receive your payment details. The App checks your subscription status on your device using Apple’s StoreKit. We don’t run a server that receives your purchase history.
6. Data stored on your device
The following data stays on your device. It is not sent to us, and it is deleted when you delete the App.
| Data | Why |
|---|---|
| Selected and recently used servers, cached server list | To reconnect quickly and work offline |
| Your DNS profiles and the selected DNS mode | To keep your DNS settings |
| Blocking settings, allowed domains, pause time | To keep your ad blocking settings |
| Browser tabs (address and preview image), website data | To restore your tabs |
| Speed test history (date, speeds, IP address and city shown) | To show your past results |
| App settings, onboarding state, premium status | For the App to work as you set it up |
7. Third-party services
These services receive data only as described above. Each processes it under its own privacy policy:
| Service | Used for |
|---|---|
| Google Firebase (Realtime Database, Analytics, Crashlytics) Privacy policy | Server list, optional analytics, crash reports |
| Google AdMob and User Messaging Platform Privacy policy | Ads and ad consent (free version) |
| Apple (App Store, StoreKit) Privacy policy | Subscriptions and payments |
| Cloudflare 1.1.1.1 Privacy policy | Default DNS for Block in All Apps; DNS Settings option |
| Google Public DNS Privacy policy | Game Boost; DNS Settings option |
| AdGuard DNS Privacy policy | Child Control; DNS Settings options |
| Quad9 Privacy policy | DNS Settings option |
| CleanBrowsing Privacy policy | DNS Settings options |
| Control D Privacy policy | DNS Settings options |
| Wikimedia DNS Privacy policy | DNS Settings option |
| Speedtest by Ookla Privacy policy | Speed test servers |
| ip-api.com Privacy policy | IP address and location shown in the speed test |
| DuckDuckGo Privacy policy | Search in the Private Browser |
| GitHub Pages Privacy policy | Hosting of the Solitaire game |
We do not sell your personal information. We may disclose information if required by law, such as to comply with a valid legal request, or to protect the rights, property or safety of our users, the public or us. Because our VPN servers keep no logs, we have no record of your online activity that we could provide.
8. Legal bases (EEA, UK)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
- Performance of a contract: providing the VPN, DNS, blocking and other features you use, and your subscription.
- Consent: analytics, personalized ads and access to the advertising identifier. You can withdraw consent at any time with the Share Usage Data switch or under Privacy Settings.
- Legitimate interests: crash reports to keep the App stable, non-personalized ads to fund the free version, and keeping our servers secure.
Cheese Quake LLC is the controller of the data described in this policy.
9. Your choices and rights
- Share Usage Data: turn analytics and personalized ads on or off in the App’s menu.
- Privacy Settings: in the EEA, UK and Switzerland, change your ad consent in the App’s menu.
- Tracking: iOS Settings › Privacy & Security › Tracking.
- Notifications: iOS Settings › Notifications › United VPN.
- VPN configuration: iOS Settings › General › VPN & Device Management.
- Delete your data: deleting the App removes everything stored on your device.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, and to withdraw consent. You also have the right to complain to your local data protection authority. Because we don’t have accounts, we usually can’t link data to you. To make a request, email us at contact@cheese-quake.com, and we will help as far as we can.
10. US state privacy rights
We do not sell personal information for money. If you turn on Share Usage Data and allow tracking, Google may use your advertising identifier to show personalized ads. Some US state laws, such as California’s, may treat this as “sharing” or “targeted advertising”. You can opt out at any time by turning off Share Usage Data or denying tracking in iOS Settings. We do not use or disclose sensitive personal information to infer characteristics about you.
11. Retention
- Data on your device stays until you change it or delete the App.
- The “Recently Blocked” list is kept only in memory while blocking runs.
- Our VPN servers keep no logs of your activity or connections.
- Crashlytics keeps crash reports for 90 days.
- Analytics data, if you share it, is kept according to the data retention settings of our Firebase project.
- Support emails are kept as long as needed to answer you.
12. Security
VPN traffic is encrypted between your device and our server, and our VPN servers keep no logs, so there is no record of your online activity to expose. DNS filtering and content blocking run on your device. Requests to Firebase and to Google’s ad services use HTTPS. No method of transmission or storage is completely secure, but we work to protect the information we handle and to keep it to a minimum.
13. International transfers
Our service providers, such as Google, may process data in the United States and other countries. Where required, they use safeguards such as the European Commission’s Standard Contractual Clauses. VPN servers are located in the countries shown in the App’s server list.
14. Children
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. Child Control is a DNS filter that parents can turn on; it does not collect information about the child. If you believe a child has sent us personal information, contact us at contact@cheese-quake.com and we will delete it.
15. Changes to this policy
We may update this policy when the App or the law changes. We will post the new version on this page and change the “Last updated” date.
16. Contact us
Cheese Quake LLC
Email: contact@cheese-quake.com
See also: Terms & Conditions
© 2026 Cheese Quake LLC