Privacy Rights (GDPR / CCPA)

This page explains the privacy rights available to you under applicable law and how to exercise them with TuxlerVPN Mobile. The single point of contact for all data-rights requests is [email protected]. The authoritative sources are the Privacy Policy, in particular sections 6 and 11, the CCPA Notice, and the GDPR Notice for Google Play Users.

If you are specifically looking to delete your data and end your relationship with TuxlerVPN Mobile, the dedicated walkthrough (covering Standard users, Premium subscribers, and people who have written to support) is at Delete Your Account.

Your rights at a glance

The rights available to you depend on where you live and which laws apply.

EU / UK GDPR (residents of the EEA, the UK, or Switzerland). You may request:

• The right of access: a copy of the personal data we process about you
• The right to rectification: correction of inaccurate or incomplete data
• The right to erasure: deletion of your personal data
• The right to restrict processing
• The right to object to certain processing
• The right to data portability: your data in a structured, machine-readable format
• The right to withdraw consent at any time
• The right to lodge a complaint with your local data protection authority

Source: Privacy Policy §6.

CCPA / CPRA (California residents). You may request:

• The right to know what personal information we collect, use, disclose, and (where applicable) sell or share
• The right to delete personal information we hold about you
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information. Note that TuxlerVPN Mobile does not sell or share your personal information for cross-context behavioural advertising (Privacy Policy §6)
• The right to non-discrimination for exercising any of the above

Source: CCPA Notice and Privacy Policy §6.

All users. Regardless of jurisdiction, you may always:

• Request deletion of your data, including any limited backend records associated with a Premium subscription. The dedicated walkthrough is at Delete Your Account, and the underlying procedure is in Privacy Policy §11.

How to submit a request

1. Email [email protected] with the subject line Privacy Rights Request: [right type], for example Privacy Rights Request: Erasure.
2. State which right you are exercising and the outcome you are seeking.
3. Provide identifying information so we can locate the data associated with you. Because TuxlerVPN Mobile does not require traditional account creation, the relevant identifiers are typically (a) your app-instance UUID, visible on the About screen of the Android app where exposed, (b) for Premium users, the Google Play order ID, which we can match against our entitlement records, and (c) the approximate dates and country from which you used the app. Source: Privacy Policy §6 and §11.
4. We will action the request within the timelines below and reply by email to confirm.

How we identify you

TuxlerVPN Mobile does not require you to create a named account, so we may need additional information to associate your request with the records we hold.

The app-instance UUID is the primary identifier for both Standard and Premium users. For Premium users, the Google Play order ID is a useful secondary identifier, since we can match it against our entitlement records. The approximate dates and country of use are a fallback context. We do not maintain user emails for the service, so an email address is not a reliable identifier unless you have previously written to support, in which case the address you wrote from is the identifier for that correspondence. If your installation has been removed and the UUID is no longer available to you, we may not have any data tied to you that we can act on, because session-level records are discarded on disconnect (Privacy Policy §2.6, §8). In that case the most useful step is to confirm there is nothing further to delete.

We will only use the identifying information you provide for the purpose of locating and acting on your request.

Response time and extensions

For GDPR / UK GDPR requests we respond within 30 days. For CCPA requests we respond within 45 days, extendable by a further 45 days where reasonably necessary, with notice to you. We may extend response times where the request is complex or where you have submitted multiple requests, and we will explain the reason if so. Asking us a general question about our practices does not by itself constitute a privacy-rights request. Please make the request explicit if you intend to invoke a right.

Appeals and supervisory authorities

If you believe we have mishandled your request, you may reply directly to us at [email protected] to ask for review. You also have the right to lodge a complaint with your local data protection authority. Examples include the United Kingdom’s Information Commissioner’s Office (ICO), the Irish Data Protection Commission (DPC), the French Commission Nationale de l’Informatique et des Libertés (CNIL), and, for California residents, the California Attorney General and the California Privacy Protection Agency.

Lodging a complaint with a supervisory authority does not affect any other legal remedy available to you.

What we do not do

• We do not sell or share personal information for cross-context behavioural advertising (Privacy Policy §6, CCPA Notice).
• We do not engage in automated decision-making with legal or similarly significant effects on you.
• We do not profile users to build advertising audiences or to target ads inside the app or on the website. The TuxlerVPN Mobile Android app contains no advertising SDK, no attribution SDK, and no general-purpose analytics SDK other than the Sentry crash reporter described in Privacy Policy §2.4.

Updates

This document is reviewed when the Privacy Policy is reviewed. Last reviewed: 3 May 2026.