Privacy Policy
Black Diamond Studios · Effective 1 September 2026
This policy describes the build of Diamond VPN you have installed. It ships inside the app rather than only on a website, so the policy you are reading and the software you are running cannot drift apart.
The short version
We do not know who you are. There is no account, no email address and no password. We do not record the websites you visit, the addresses you connect to, or the DNS queries you make. We keep the minimum needed to run the service and enforce the fair-use limits, and nothing else.
There is no account
Diamond VPN has no sign-up. When you first open the app it creates an anonymous device registration: the app generates a random identifier on your phone and exchanges it with our server for a device token. That token is what lets your phone request a connection. It is not linked to your name, your email address, your phone number or your Google account, because we never ask for any of them.
If you uninstall the app, that registration is orphaned and expires. There is no way for us to connect a new install to an old one.
What we store
| Data | Why | Kept for |
|---|---|---|
| Device token | Proves your phone may request a connection | Until you uninstall or it is rotated |
| Whether the device passed attestation | Selects your speed and data tier | Same as above |
| Session lease | The temporary key and internal tunnel address your phone uses | Released when you disconnect; expires after 24 hours |
| Bytes transferred | Enforces the daily fair-use limit | Reset daily |
That is the complete list. Our database has no column for a destination address, a hostname, or a DNS query, so those records cannot exist even by accident.
What we deliberately do not store
- No browsing logs. We do not record which sites or services you connect to.
- No DNS query logs. Our filtering resolver is configured with query logging switched off.
- No traffic inspection. We do not read, modify or inject anything into your traffic. Nothing is added to the pages you load.
- No connection timestamps tied to activity. We do not keep a history of when you connected or from which network.
- No persistent system logs on our VPN servers. Their system journals are held in memory only, capped, and discarded when the server restarts.
Encryption keys stay on your phone
Your phone generates a new encryption key pair every time you connect. The private half never leaves your device — it is not transmitted to us and we could not recover it if asked. Only the public half is sent, and because it changes each session it cannot be used to link one session to another, including by us.
Your real IP address
To route your traffic we necessarily receive the internet address your phone is connecting from, in the same way any website does. It is held in memory for the life of the connection and is not written to any log or database by us.
One honest limitation. Our account server sits behind Cloudflare, which operates its own network logs over which we have no control. Requests your app makes to our server may therefore appear in Cloudflare's records under their own policy. This does not apply to your VPN traffic itself, which goes directly to our servers and never through Cloudflare.
Security filtering
While you are connected, DNS lookups are checked against published threat-intelligence lists — malware distribution hosts, phishing pages, and known botnet infrastructure. A match is answered with a blank address so the connection fails.
These lists cover security threats only. We do not block advertising or analytics domains. Doing so would remove other developers' revenue from inside our product, and we do not think that is ours to take.
Blocking happens by comparing a name against a list. We do not record which names you looked up, whether they matched or not.
File sharing is blocked
BitTorrent and other peer-to-peer file-sharing traffic is blocked on our servers. This protects the service: copyright complaints get our servers disconnected, and a small number of heavy users would consume the capacity that keeps the service free for everyone else.
We detect this from the shape of the traffic — ports, protocol signatures, and the number of simultaneous connections. We do not examine what is being transferred, and we do not record it.
Advertising
Diamond VPN is intended to be funded by advertising so that it can stay free.
In this build, the advertising slots are placeholders. No advertising SDK is included, no ads are requested, and no advertising identifier is collected or shared. When advertising is enabled, this policy will be updated in the same release, and the app's Play Store data-safety disclosure will be updated with it, so that this document always describes the version you have installed.
Advertising will never be injected into your VPN traffic. Ads will appear only within the app's own screens.
Permissions
- VPN (BIND_VPN_SERVICE) — required to create the encrypted tunnel. Android asks you to approve this the first time, and shows a key icon whenever it is active.
- Internet and network state — to connect, and to notice when your network changes so the tunnel can recover.
- Notifications — to show that the tunnel is running and offer a disconnect control.
Diamond VPN does not request location, contacts, storage, camera or microphone access.
Children
Diamond VPN is not directed to children under 13, and we do not knowingly collect information from them. Because we collect no personal information from anyone, we have none to delete.
Sharing
We do not sell, rent or trade your data. We do not have advertising or analytics partners in this build.
We may disclose information if legally compelled. In practice we hold no browsing records, so a request for your activity is one we cannot satisfy: the data does not exist. We would respond that we are unable to identify a user's activity.
Your rights
Because we hold no personal information, there is normally nothing to export or erase. Uninstalling the app ends the registration and the daily counters expire on their own. If you want your device registration deleted sooner, write to us and we will remove it.
Changes
If this policy changes, the updated text ships inside the app update, and the effective date above changes with it. Material changes will be summarised in the Play Store release notes.
Contact
Black Diamond Studios