Sixo VPN Privacy Policy

Effective: October 16, 2026. App version: 0.6. Operator: OUTFLAIR ONLINE LTD. Contact: hello247@sixo-vpn.online.

Service and scope

Sixo VPN provides a WireGuard VPN connection. The current service has one gateway in Sydney, Australia, and a 128 MiB allowance per device per UTC day. Registration is free, has no email/password login, and is subject to capacity and anti-abuse limits. Service availability and limits may change. This policy covers the Android app, managed access API, gateway and these support pages.

Information we process and why

On your device, the app creates a VPN private key and stores it, the access token and deletion code encrypted using Android Keystore. Imported personal profiles are stored locally. These secrets are excluded from Android app backups. The VPN private key is not uploaded.

For managed service access we receive and retain your VPN public key, an internal device reference, an assigned tunnel address, a hash of your access credential, a hash of your deletion code, last service activity time, and aggregate uploaded/downloaded byte counters for the current accounting day. These records authorize connections, apply allowances, manage capacity and fulfill deletion. A device reference identifies a registration; it is not your phone hardware ID. The app does not request your name, email address, contacts, precise location, phone identifiers or advertising ID.

Your source IP address is processed while serving network requests. To limit automated registrations, we store a keyed hash derived from that address and the UTC day, with an attempt count. Registration also uses a short computation on your device; it is not cryptocurrency mining. It sends no browsing history. Raw registration IP addresses are not stored by our application. Sharing a network may cause users to share a registration limit.

While connected, the gateway forwards internet traffic and the network must process source/destination addresses and packet contents to deliver it. Our application does not record browsing destinations, browsing history, DNS query histories or packet contents. This is not a claim that providers or destination services process no data. WireGuard encrypts traffic between your device and our VPN endpoint; it does not encrypt every connection beyond that endpoint. Use HTTPS for sensitive websites.

Providers and transfers

The API and VPN gateway run on DigitalOcean infrastructure in Sydney, Australia. DigitalOcean processes infrastructure and network data under its own privacy policy: https://www.digitalocean.com/legal/privacy-policy. DNS for the managed tunnel uses Cloudflare 1.1.1.1; DNS requests and resolver processing are described at https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/. Hostinger provides our domain and support email hosting; its privacy policy is https://www.hostinger.com/legal/privacy-policy. Your ISP, destination services and any DNS or servers in a personal imported profile also process data needed for their services. Data may be processed outside your country.

We use providers to deliver and secure the service. We do not sell your browsing data, insert ads into browsing traffic or redirect other apps' advertising traffic for monetization. This release contains no advertising or analytics SDK. These pages have no analytics, advertising, tracking cookies or third-party page resources. Information may be disclosed when required by applicable law or a valid legal request.

Retention and deletion

Device records remain while access is used. An hourly maintenance task queues registrations with no API activity for 30 days for deletion. It also retries pending deletion. On successful deletion, the control record, gateway credential and associated usage totals are removed from active databases. If a gateway is unavailable, access is disabled and deletion remains pending until the gateway confirms. Daily byte counters reset at the next accounting sweep after UTC midnight; they are not retained as a multi-day browsing history.

Registration challenge records expire after five minutes and are removed in hourly cleanup. Registration rate-limit hashes expire after 24 hours and are removed in hourly cleanup, so they may remain for up to 25 hours. Unused operator invite codes expire after 24 hours and are cleaned up hourly; used codes are removed in cleanup. Expired records cannot authorize a request.

Access logging is disabled for our API and these pages; the application does not log request bodies, access tokens or deletion codes. Operational infrastructure logs may record administrative or security events; hosting, DNS and email providers maintain their own systems and retention under their policies. The application does not create database backups. Database deletion uses SQLite secure-delete for our live records; storage media and provider systems are not guaranteed to be forensically erased. If backup or data-use practices change, this policy will be updated.

Support messages contain the information you choose to send. They are used to handle your request and retained while needed for that purpose, disputes or legal obligations. You may request removal of support correspondence. Never email access tokens, VPN private keys, root passwords or the deletion code.

How to delete your registration

In the app, disconnect and choose Delete device access. To delete without the app, save your private deletion code using Save deletion code, then use https://api.sixo-vpn.online/delete. The code authorizes deletion only; it cannot connect to the VPN. Anyone who obtains it can delete that registration. Each separately registered device must be deleted individually.

If you lose the app and its deletion code, we cannot safely identify your anonymous registration from your email address or public reference alone. Contact support for guidance; do not send secrets. An unused registration will enter automatic deletion after 30 days without service activity. Uninstalling alone does not immediately delete server records. Imported personal profiles can be deleted separately in the app; original imported files remain wherever you stored them.

Your choices and permissions

You can refuse the VPN disclosure or Android VPN permission, disconnect at any time, delete managed access, or delete local profiles. The app requests notification permission for connection status and a Disconnect action. Recovery is best effort; always-on lockdown is not implemented and stopping the VPN may restore an ordinary connection. You may request information, correction or deletion and exercise applicable privacy rights by contacting hello247@sixo-vpn.online. We may need proportionate proof of control; an email address alone does not prove ownership of an anonymous registration.

Children and changes

Sixo VPN is not designed or marketed for children under 18. If you believe a child has provided information, contact us. Material changes to data practices will be reflected here and, when appropriate, in a new in-app disclosure before collection. Contact OUTFLAIR ONLINE LTD at hello247@sixo-vpn.online with questions or complaints.