Privacy Policy

Last updated: 2026-05-18

This Privacy Policy explains how the RabbitGo application (the "Software") handles information when you use it. It does not describe the practices of any proxy service, subscription provider, or other third party you may connect through; those parties have their own policies, and you should consult them separately.

1. Summary

The publisher of RabbitGo does not collect, store, share, or sell any personal data through the Software. The Software is a local-only network client. There is no account to register, no server you sign in to, no analytics, no telemetry beacon, and no remote configuration channel. Everything the Software needs to operate is stored on your own device.

The remainder of this Policy goes into detail about what stays on your device, what network traffic the Software produces, and which third parties (if any) are involved in that traffic.

2. Information we do not collect

To be explicit, the Software does not collect or transmit to the publisher any of the following:

  • name, email address, phone number, or other contact information;
  • account credentials, login tokens, or device identifiers;
  • IP address, geolocation, language, or other technical fingerprints;
  • application usage statistics, crash reports, or performance traces;
  • the contents of your network traffic, DNS queries, or URLs you visit;
  • the contents of any subscription you import or any node you select.

The Software contains no third-party analytics SDK (such as Google Analytics, Firebase, Sentry, Bugsnag, or similar) and no advertising SDK.

3. Information stored on your device

The Software stores the following data locally on your device only. The publisher has no access to it:

  • Subscription URLs and parsed nodes. Anything you import via the Subscriptions page.
  • Selected node and routing preferences. Including current outbound, run mode (TUN / proxy), routing mode (smart / global), and per-app inclusion / exclusion lists.
  • Application logs. A rolling buffer of runtime logs, capped by the size you configure under Settings → Diagnostics.
  • Connection metadata. While the tunnel is running, the in-memory connections list shown on the Connections page records source / destination / matched rule / byte counters. This data is not persisted between launches.
  • Application settings. Theme, language, latency-probe interval, advanced tunables, and similar preferences.

You can clear any of the above at any time from within the application's settings, or wipe all of it by uninstalling the Software (or using your operating system's "clear application data" function).

4. Network traffic originating from the Software

When the Software is running, it produces three categories of network traffic. None of it goes to the publisher.

  1. Tunnelled traffic. Your device's normal traffic — apps, browser tabs, system services — is forwarded by the Software to the proxy server you have configured. The Software does not inspect, log, or store the payload of this traffic; it acts as a transparent forwarder.
  2. Subscription refreshes. Periodic HTTPS requests to the subscription URLs you have added (cadence configurable under Settings → Subscriptions). These requests are visible only to the corresponding subscription server and to network intermediaries on the path.
  3. Geo-rule updates. Routing rule-sets (geo-site, geo-IP, and optional ad-block lists) are refreshed from their respective public sources. This traffic is sent directly (not through your proxy) and carries no identifier tied to your installation.

5. Third parties

You may interact with the following third parties when using the Software. We are not responsible for their practices and recommend you consult their own privacy policies.

  • Proxy / VPN service operators. Whoever runs the proxy nodes you connect through can see, on the network layer, the destinations you visit. Their visibility is the same as any HTTPS-capable proxy operator; they may log, retain, or be compelled to disclose this data, as their own policies and applicable law dictate.
  • Subscription providers. Whoever hosts the subscription URL you imported will see HTTPS requests from your IP address when the Software refreshes.
  • Public geo-data hosts. The public mirrors that serve the routing rule-sets configured under Settings → Advanced → Geo source. They may log access in the ordinary course of operating their service.

6. Cookies and similar technologies

The Software does not use cookies, web beacons, fingerprinting scripts, advertising identifiers, or any similar tracking technology. It is a native application, not a web view, and contains no embedded web tracker.

7. Children's privacy

The Software is not directed at children under the age of 13 (or the higher minimum age of digital consent in your jurisdiction). The Software does not knowingly collect personal data from anyone, so it cannot inadvertently collect data from a child either; however, parents and guardians remain responsible for supervising minors' use of the Software and the third-party services it connects to.

8. International data transfers

Because the Software does not transmit data to the publisher, no cross-border transfer of personal data takes place between you and us. Tunnelled traffic naturally crosses borders along the path between you, the proxy server, and your destination — but that path is determined by your own choice of proxy and is not directed by the publisher.

9. Security

While no software can guarantee absolute security, the Software is designed to minimise the data it handles in the first place. Locally stored data sits in your operating system's standard application sandbox; encryption of that data at rest depends on your operating system's protections. We recommend you protect your device with a passcode or equivalent authentication.

If you believe you have discovered a security vulnerability in the Software, please report it through the contact channels at the end of this document. Responsible disclosure is appreciated.

10. Your rights

Because the Software does not collect personal data, there is no account, profile, or remote record for the publisher to access, correct, port, or delete on your behalf. Nonetheless, you retain the rights granted by your local data-protection law (such as the GDPR in the EU/UK or the CCPA / CPRA in California), and you can exercise the practical equivalents directly:

  • Access / portability. All of your data is on your device — read it, export it, or back it up directly.
  • Correction. Edit it within the Software's settings.
  • Erasure ("right to be forgotten"). Clear individual items in settings, or uninstall the Software / wipe its data.
  • Restriction / objection. Stop using the Software, or turn off any feature you do not consent to.

11. Changes to this policy

The publisher may update this Policy from time to time. Material changes will be surfaced in the application's release notes or About page. Your continued use of the Software after the effective date of any change constitutes acceptance of the revised Policy.

12. Contact

Questions about this Policy can be sent to the contact address shown on the Software's About page or on the product website.

Questions about this document? Contact privacy@rabbitgo.app